PT-2020-10772 · Readdle · Readdle Documents

Michał Dardas · Published 2020-05-17 · Updated 2020-05-19 · CVE-2019-20802

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Readdle Documents app versions prior to 6.9.7

Description The application's file-transfer web server improperly displays directory names, leading to Stored XSS, which may be used to steal a user's data. This requires user interaction because there is no known direct way for an attacker to create a crafted directory name on a victim's device. However, a crafted directory name can occur if a victim extracts a ZIP archive that was provided by an attacker.

Recommendations For versions prior to 6.9.7, update to version 6.9.7 or later to resolve the issue. As a temporary workaround, consider avoiding the extraction of ZIP archives from untrusted sources to minimize the risk of exploitation. Restrict access to the file-transfer web server to minimize the risk of Stored XSS attacks.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2019-20802

Affected Products

Readdle Documents

References · 6

• 🔥 https://logicaltrust.net/blog/2019/12/documents.html#xss · Exploit
• https://osv.dev/vulnerability/CVE-2019-20802 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-20802 · Security Note
• https://t.me/cibsecurity/12124 · Telegram Post
• https://t.me/cvenotify/3870 · Telegram Post
• https://apps.apple.com/us/app/documents-by-readdle/id364901807 · Note