CVE-2020-23038

Swift File Transfer Mobile v1.1.2 and below was discovered to contain an information disclosure vulnerability in the path parameter. This vulnerability is exploited via an error caused by including non-existent path environment variables.

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

3.03% chance of exploitation in the next 30 days, 87th percentile

Published

2021-10-22

Updated

2024-08-04

Proof-of-concept exploits (1)

• https://www.vulnerability-lab.com/get_content.php?id=2205

References

• CVE Record
• NVD entry

Related

• CVE-2020-23037
• CVE-2020-23039
• CVE-2020-23036
• CVE-2020-23040
• CVE-2020-23015
• CVE-2020-23041