medium5.3
CVE-2020-20472
White Shark System (WSS) 1.3.2 has a sensitive information disclosure vulnerability.
Impact
White Shark System (WSS) 1.3.2 has a sensitive information disclosure vulnerability. The if_get_addbook.php file does not have an authentication operation. Remote attackers can obtain username information for all users of the current site.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| White Shark Systems Project | White Shark Systems | Version 1.3.2 |