CVE-2019-20801

PoC —

CVSS 3.1

5.3 medium

EPSS

1%p61

Published

May 18, 2020 (May 18, 2020)

Modified

Jun 17, 2026

Description

An issue was discovered in the Readdle Documents app before 6.9.7 for iOS. The application's file-transfer web server allows for cross-origin requests from any domain, and the WebSocket server lacks authorization control. Any web site can execute JavaScript code (that accesses a user's data) via cross-origin requests.

Vendors: readdle
Products: documents
Weakness: CWE-862, CWE-863
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.