CVE-2020-7998

ALTO 8.8CVE-2020-7998 · Published 28/01/2020 · updated 17/06/2026

In breve

CVE-2020-7998 è una vulnerabilità ALTO (CVSS 8.8) che riguarda super file explorer (super file explorer project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.5%, superiore al 74.5% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
super file explorer super_file_explorer_project	`= 1.0.1`	No fix yet

Description

An arbitrary file upload vulnerability has been discovered in the Super File Explorer app 1.0.1 for iOS. The vulnerability is located in the developer path that is accessible and hidden next to the root path. By default, there is no password set for the FTP or Web UI service.

References

apps.apple.com/us/app/super-file-explorer-file-viewer-file-manager/id1101973946 · Product
gist.github.com/adeshkolte/9e60b2483d2f20d1951beac0fc917c6f · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free