CVE-2020-37080

7.2 highEPSS 0.4%

High (7.2). EPSS 0.4% chance of exploitation in the next 30 days.

webTareas 2.0.p8 contains a file deletion vulnerability in the print_layout.php administration component that allows authenticated attackers to delete arbitrary files. Attackers can exploit the vulnerability by manipulating the 'atttmp1' parameter to specify and delete files on the server through an unauthenticated file deletion mechanism.

Severity

CVSS 4.0

7.2 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 32% of CVEs (scores of 2026-10-31)
CWE: CWE-73
Published: 2026-02-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://sourceforge.net/projects/webtareas/
https://www.exploit-db.com/exploits/48430
https://www.vulncheck.com/advisories/webtareas-p-arbitrary-file-deletion

Check your stack JSON