VULNERABILITY INTELLIGENCE

CVE-2020-23038

CVSS score7.5 HIGH
EPSS probability3.03%
CISA KEVNot currently listed
Published2021-10-22
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

Swift File Transfer Mobile v1.1.2 and below was discovered to contain an information disclosure vulnerability in the path parameter. This vulnerability is exploited via an error caused by including non-existent path environment variables.

Weakness classification

  • nvd@nist.gov: CWE-22

Primary references