high7.5
CVE-2019-20060
MFScripts YetiShare v3.5.2 through v4.5.4 places sensitive information in the Referer header.
Impact
MFScripts YetiShare v3.5.2 through v4.5.4 places sensitive information in the Referer header. If this leaks, then third parties may discover password-reset hashes, file-delete links, or other sensitive information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mfscripts | Yetishare | from 3.5.2 through 4.5.4 |