CVE Intelligence
Analysis AI-assisted

CVE-2020-37080: webTareas 2.0.p8 Arbitrary File Deletion in print_layout.php

CVE-2020-37080 is a file deletion weakness in the print_layout.php administration component of webTareas 2.0.p8, classified as CWE-73. VulnCheck, the CNA, lists a CVSS 3.1 base score of 9.8 (critical), while the record shows no confirmed exploitation in CISA KEV and no fixed version data.

Published Oct 13, 2026 · Updated Oct 13, 2026 · Ler em português

Overview

CVE-2020-37080 describes an arbitrary file deletion weakness in webTareas 2.0.p8, located in the print_layout.php administration component. The record classifies it under CWE-73 (External Control of File Name or Path).

Impact

  • VulnCheck, the CNA, lists a CVSS 3.1 base score of 9.8 (critical), with a vector indicating network access, low complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity and availability.
  • The same provider lists a CVSS 4.0 score of 7.2.
  • Deletion of server files could disrupt application availability and data integrity, which is an inference from the description.

Affected products and versions

  • The description names webTareas 2.0.p8. The record contains no structured affected version ranges and no fixed versions.
  • The project page is available at SourceForge webTareas.

Exploitation status

The record marks this CVE as not listed in CISA KEV. No confirmed exploitation appears in the sources consulted. The record references a public exploit database entry, whose existence is noted here but whose content is not analyzed.

Remediation and mitigation

  • The record does not identify a vendor fix. Check the project page and the VulnCheck advisory for updates or a supported replacement.
  • Restrict access to administrative interfaces to trusted networks and accounts.
  • Limit file system permissions of the web application account so it cannot delete files beyond what is strictly required.
  • Maintain verified backups and test restoration procedures.

Detection guidance

  • Review web server and application logs for requests to the print_layout.php component from unexpected sources.
  • Monitor for unexpected missing files or file deletion events in application directories.
  • Alert on administrative activity from unusual accounts or addresses.

Limitations of the available information

  • The description is internally inconsistent: it describes attackers as authenticated and then refers to an unauthenticated deletion mechanism. The CVSS vector reports no privileges required (PR:N). Whether authentication is needed should be verified with the vendor or the advisory.
  • No affected version ranges, fixed versions, EPSS score or SSVC result are present in the record.
  • No CWE name is provided in the record.

Frequently asked questions

What is CVE-2020-37080?

It is a file deletion weakness in the print_layout.php component of webTareas 2.0.p8, which can allow deletion of files on the server. VulnCheck lists a CVSS 3.1 score of 9.8.

Is there a fix for this vulnerability?

The record does not identify a fixed version. Check the project page and the VulnCheck advisory for updates, and restrict access to the administrative interface in the meantime.

Is this vulnerability being actively exploited?

The record does not list it in CISA KEV, and no confirmed exploitation appears in the sources consulted.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.