CVE-2020-36825 | cyberaz0r WebRAT up to 20191222 Server/api.php download_file name unrestricted upload

A vulnerability has been found in cyberaz0r WebRAT up to 20191222 and classified as critical. This vulnerability affects the function download_file of the file Server/api.php. The manipulation of the argument name leads to unrestricted upload.

This vulnerability was named CVE-2020-36825. The attack can be initiated remotely. There is no exploit available.

It is recommended to apply a patch to fix this issue.