CoreCVE
Back

MEDIUM

An issue was discovered in the Readdle Documents app before 6.9.7 for iOS

Published May 17, 2020

Description

An issue was discovered in the Readdle Documents app before 6.9.7 for iOS. The application's file-transfer web server allows for cross-origin requests from any domain, and the WebSocket server lacks authorization control. Any web site can execute JavaScript code (that accesses a user's data) via cross-origin requests.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-862

Missing Authorization

CWE-863

Incorrect Authorization

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published May 17, 2020
Updated Aug 5, 2024
Reserved May 17, 2020
Link CVE-2019-20801
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2019-20801
Red Hat
Severity n/a
Public date n/a
Links CVE-2019-20801