CVE-2019-20060

MFScripts YetiShare v3.5.2 through v4.5.4 places sensitive information in the Referer header. If this leaks, then third parties may discover password-reset hashes, file-delete links, or other sensitive information.
Configurations

Configuration 1 (hide)

cpe:2.3:a:mfscripts:yetishare:*:*:*:*:*:*:*:*

History

07 Nov 2023, 03:08

Type Values Removed Values Added
References
  • {'url': 'https://medium.com/@jra8908/yetishare-3-5-2-4-5-4-multiple-vulnerabilities-927d17b71ad', 'name': 'https://medium.com/@jra8908/yetishare-3-5-2-4-5-4-multiple-vulnerabilities-927d17b71ad', 'tags': ['Exploit', 'Third Party Advisory'], 'refsource': 'MISC'}
  • () https://medium.com/%40jra8908/yetishare-3-5-2-4-5-4-multiple-vulnerabilities-927d17b71ad -

Information

Published : 2020-02-10 13:15

Updated : 2023-12-10 13:13


NVD link : CVE-2019-20060

Mitre link : CVE-2019-20060

CVE.ORG link : CVE-2019-20060


JSON object : View

Products Affected

mfscripts

  • yetishare
CWE
CWE-922

Insecure Storage of Sensitive Information