CVE-2020-23038

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2021-10-22 · updated 2026-06-17
Weakness: CWE-22

Description

Swift File Transfer Mobile v1.1.2 and below was discovered to contain an information disclosure vulnerability in the path parameter. This vulnerability is exploited via an error caused by including non-existent path environment variables.

Affected products

Kumilabs Swift File Transfer: through 1.0.19; through 1.1.2

References

https://www.vulnerability-lab.com/get_content.php?id=2205
https://www.vulnerability-lab.com/get_content.php?id=2205

Get alerted when CVE-2020-23038 or the next vulnerability affects your stack