CVE-2019-20060: Mfscripts Yetishare

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

MFScripts YetiShare v3.5.2 through v4.5.4 places sensitive information in the Referer header. If this leaks, then third parties may discover password-reset hashes, file-delete links, or other sensitive information.

Affected products

• Mfscripts Yetishare: from 3.5.2, up to and including 4.5.4

Published 2020-02-10. Last modified 2026-06-17.