PT-2021-10815
CVE-2020-23038
·
تاريخ النشر
2021-10-22
·
تاريخ التحديث
2021-10-27
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Swift File Transfer Mobile versions 1.1.2 and below
Description
The issue is related to an information disclosure problem in the
path parameter. It is triggered by an error that occurs when non-existent path environment variables are included.Recommendations
For versions 1.1.2 and below, avoid using the
path parameter with non-existent path environment variables until a fix is available. As a temporary workaround, consider restricting access to the path parameter to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾