CVE-2020-36825

CVE-2020-36825 describes a critical unrestricted upload vulnerability in the download_file function of Server/api.php within cyberaz0r WebRAT, affecting versions up to 20191222. The vulnerability allows remote attackers to upload arbitrary files by manipulating the 'name' argument. While initially classified as critical, its existence is disputed, and it affects an unsupported product with minimal usage. The CVSS score of 6.3 (Medium) indicates a network-based attack with low complexity and privileges, potentially leading to low impact on confidentiality, integrity, and availability. However, the EPSS score is extremely low, suggesting a very low probability of exploitation in the wild. There is no evidence of active exploitation, exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage. The CVE itself is controversial, with the project maintainer arguing against its eligibility due to its age, resolution, and the product's obscurity.