The user-introduction email in... CVE-2019-20061

5.0 AV AC AU C I A
发布: 2020-02-10
修订: 2023-11-07

The user-introduction email in MFScripts YetiShare v3.5.2 through v4.5.4 may leak the (system-picked) password if this email is sent in cleartext. In other words, the user is not allowed to choose their own initial password.

0%
暂无可用Exp或PoC
当前有1条受影响产品信息