AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2019-20801

MEDIUM · CVSS 5.3 EPSS 1.01%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-05-18 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2019-20801
Severity
MEDIUM
CVSS
5.3
EPSS
1.01%
Java

Original NVD Description

An issue was discovered in the Readdle Documents app before 6.9.7 for iOS. The application's file-transfer web server allows for cross-origin requests from any domain, and the WebSocket server lacks authorization control. Any web site can execute JavaScript code (that accesses a user's data) via cross-origin requests.