CVE-2020-36825
CVSS 3.1 Score 6.3 of 10 (medium)
Details
Summary
CVE-2020-36825 is a critical vulnerability identified in outdated versions of cyberaz0r WebRAT, specifically in the function download_file of api.php. The issue allows for unrestricted file uploads when manipulating the argument name, which can be exploited remotely. However, the existence of this vulnerability is disputed, as its authenticity is still in question. A patch (0c3v9a795b9c10c07085361e6fcea286ee793701) has been identified, but it is important to note that this vulnerability only affects unsupported versions of the software. The identifier VDB-257782 has been assigned to this issue, and it is recommended to apply the patch to mitigate potential risks. Despite the controversy surrounding its CVE designation, it is crucial to prioritize security and keep software up-to-date.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions