CVE-2020-36009

Name of the Vulnerable Software and Affected Versions: OBottle version 2.0

Description: The issue is related to an arbitrary file download vulnerability in the c/g.php file of OBottle. This vulnerability allows for the download of arbitrary files.

Recommendations: For OBottle version 2.0, consider restricting access to the c/g.php file until a patch is available. As a temporary workaround, avoid using the vulnerable file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.