CVE-2019-20062: Mfscripts Yetishare

Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days.

MFScripts YetiShare v3.5.2 through v4.5.4 might allow an attacker to reset a password by using a leaked hash (the hash never expires until used).

Affected products

• Mfscripts Yetishare: from 3.5.2, up to and including 4.5.4

Published 2020-02-10. Last modified 2026-06-17.