Description
i-doit Open Source CMDB 1.14.1 contains a file deletion vulnerability in the import module that allows authenticated attackers to delete arbitrary files by manipulating the delete_import parameter. Attackers can send a POST request to the import module with a crafted filename to remove files from the server's filesystem.
Exploits (1)
Scores
CVSS v3
8.8
EPSS
0.0007
EPSS Percentile
21.9%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
total
Details
CWE
CWE-73
Status
published
Products (1)
i-doit GmbH/i-doit Open Source CMDB
1.14.1
Published
Feb 03, 2026
Tracked Since
Feb 18, 2026