PT-2020-17376 · Jaws · Jaws

Bassam Assiri · Published 2020-12-23 · Updated 2020-12-23 · CVE-2020-35656

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Jaws versions 1.8.0 and earlier

Description The issue allows remote authenticated administrators to execute arbitrary code via crafted use of "admin.php?reqGadget=Components&reqAction=InstallGadget&comp=FileBrowser" and "admin.php?reqGadget=FileBrowser&reqAction=Files" to upload a .php file. This is unrelated to the JAWS (aka Job Access With Speech) product.

Recommendations For versions 1.8.0 and earlier, as a temporary workaround, consider disabling the use of the admin.php endpoint with reqGadget and reqAction parameters until a patch is available. Restrict access to the FileBrowser component to minimize the risk of exploitation. Avoid using the comp and reqAction parameters in the affected API endpoints until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2020-35656

Affected Products

Jaws

References · 6

• 🔥 https://github.com/xNoBody12/Jaws-CMS-RCE · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-35656 · Security Note
• https://osv.dev/vulnerability/CVE-2020-35656 · Vendor Advisory
• https://github.com/jaws-project/jaws · Note
• https://t.me/cvenotify/7623 · Telegram Post
• https://t.me/cibsecurity/21211 · Telegram Post