CVE-2020-12427

2020-05-1314:28:31

mitre

www.cve.org

AI Score

8.6

Confidence

High

EPSS

0.001

Percentile

30.9%

JSON

The Western Digital WD Discovery application before 3.8.229 for MyCloud Home on Windows and macOS is vulnerable to CSRF, with impacts such as stealing data, modifying disk contents, or exhausting disk space.

References

support.wdc.com/downloads.aspx?g=907&lang=en

www.westerndigital.com/support/productsecurity/wdc-20004-wd-discovery-cross-site-request-forgery-csrf