VulnerabilityModified
CVE-2019-20801
The application's file-transfer web server allows for cross-origin requests from any domain, and the WebSocket server lacks authorization control.
MEDIUM 5.3EPSS 1.01%
Does this matter?
Lower severity and a low EPSS score (1.01%). Track it; it rarely justifies an emergency change on its own.
Description
An issue was discovered in the Readdle Documents app before 6.9.7 for iOS. The application's file-transfer web server allows for cross-origin requests from any domain, and the WebSocket server lacks authorization control. Any web site can execute JavaScript code (that accesses a user's data) via cross-origin requests.
- CVSS 3.1
- 5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- EPSS
- 1.01% probability · 61th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-862, CWE-863
- Affected
- readdle/documents
- Source
- cve@mitre.org
References
- https://apps.apple.com/us/app/documents-by-readdle/id364901807Product, Release Notes
- https://logicaltrust.net/blog/2019/12/documents.html#authorizationExploit, Third Party Advisory
- https://apps.apple.com/us/app/documents-by-readdle/id364901807Product, Release Notes
- https://logicaltrust.net/blog/2019/12/documents.html#authorizationExploit, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.