CVE-2019-20060 | BDVDB-2026-130501 Detail

Description#

MFScripts YetiShare v3.5.2 through v4.5.4 places sensitive information in the Referer header. If this leaks, then third parties may discover password-reset hashes, file-delete links, or other sensitive information.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://yetishare.com/
https://mfscripts.com/
https://medium.com/%40jra8908/yetishare-3-5-2-4-5-4-multiple-vulnerabilities-927d17b71ad

Exploit#

No public exploit known

History#

Version 12020-02-10Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.