CVE-2020-35370

Raysync has a remote code execution vulnerability (CVE-2020-35370) affecting versions below 3.3.3.8. An unauthenticated attacker can craft a request that overwrites a server file, then log in as admin and modify a shell file to achieve RCE on the hosting server. Public exploit availability is ind...