VYPR
Unrated severityNVD Advisory· Published Dec 23, 2020· Updated Aug 4, 2024

CVE-2020-35657

CVE-2020-35657

Description

Jaws through 1.8.0 allows remote authenticated administrators to execute arbitrary code via crafted use of UploadTheme to upload a theme ZIP archive containing a .php file that is able to execute OS commands. NOTE: this is unrelated to the JAWS (aka Job Access With Speech) product.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Jaws/Jawsdescription
  • Jaws/Jawsllm-fuzzy
    Range: <=1.8.0

Patches

Vulnerability mechanics

News mentions

0

No linked articles in our index yet.