Logo
›
›vulnerability›CVE-2020-27304
Name
CVE-2020-27304
Source
NVD ( link)Debian ( link)
Description
The CivetWeb web library does not validate uploaded filepaths when running on an OS other than Windows, when using the built-in HTTP form-based file upload mechanism, via the mg_handle_form_request API. Web applications that use the file upload form handler, and use parts of the user-controlled filename in the output path, are susceptible to directory traversal
CWEs
CWE-23 CWE-22
Published Date
Updated Date
Workaround
-
Advisories
https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdfPatch
https://groups.google.com/g/civetweb/c/yPBxNXdGgJQMailing List
https://jfrog.com/blog/cve-2020-27304-rce-via-directory-traversal-in-civetweb-http-server/Exploit
https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdfPatch
https://groups.google.com/g/civetweb/c/yPBxNXdGgJQMailing List
https://jfrog.com/blog/cve-2020-27304-rce-via-directory-traversal-in-civetweb-http-server/Exploit

Analysis#

Affected Component
Analysis
civetweb
Patched

Vulnerability Ratings#

9.8
CVSSv31
7.5
CVSSv2

Others affected components#

Name
Project
Project Version
Version
Status
civetweb
buildroot
2025.02.x
1.16
Not Affected
civetweb
buildroot
master
1.16
Not Affected
civetweb
yocto
master
1.16+git
Not Affected
civetweb
yocto
scarthgap
1.16
Not Affected

Resolved with patches#

civetweb (yocto:kirkstone)

#
Title
Author
Resolve
1
Sanitize upload filename like URL
bel2125 <bel2125@gmail.com>
CVE-2020-27304
2
handle_form example: Upload to temporary directory and do
bel2125 <bel2125@gmail.com>
CVE-2020-27304