PT-2021-10815
CVE-2020-23038
·
Published
2021-10-22
·
Updated
2021-10-27
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Swift File Transfer Mobile versions 1.1.2 and below
Description
The issue is related to an information disclosure problem in the
path parameter. It is triggered by an error that occurs when non-existent path environment variables are included.Recommendations
For versions 1.1.2 and below, avoid using the
path parameter with non-existent path environment variables until a fix is available. As a temporary workaround, consider restricting access to the path parameter to minimize the risk of exploitation. Found an issue in the description? Have something to add? Feel free to write us 👾