CVE-2020-20472

2021-06-2104:05:47

mitre

www.cve.org

white shark system

sensitive information disclosure

addbook vulnerability

remote attackers

AI Score

5.4

Confidence

High

EPSS

0.002

Percentile

65.1%

JSON

White Shark System (WSS) 1.3.2 has a sensitive information disclosure vulnerability. The if_get_addbook.php file does not have an authentication operation. Remote attackers can obtain username information for all users of the current site.

References

github.com/itodaro/WhiteSharkSystem_cve