CVE-2019-20060

—

CVSS 3.1

7.5 high

EPSS

1%p72

Published

Feb 10, 2020 (Feb 10, 2020)

Modified

Jun 17, 2026

Description

MFScripts YetiShare v3.5.2 through v4.5.4 places sensitive information in the Referer header. If this leaks, then third parties may discover password-reset hashes, file-delete links, or other sensitive information.

Vendors: mfscripts
Products: yetishare
Weakness: CWE-922
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.4%)

In the news0 stories

No ingested article mentions this CVE yet.