CVE-2020-37086CWE-22

Easy Transfer 1.7 for iOS - Directory Traversal

Medium · published February 3, 2026

CVSS v4.0
6.9
EPSS
1%
Percentile
46.9
In the wild
Unconfirmed
What it is

Easy Transfer 1.7 iOS mobile application contains a directory traversal vulnerability that allows remote attackers to access unauthorized file system paths without authentication. Attackers can exploit the vulnerability by manipulating path parameters in GET and POST requests to list or download sensitive system files and inject malicious scripts into application parameters.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00580 · 46.9th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2026-02-03T22:01Z
EPSS history
Timeline
  • 03 FEB 22:01Z
    Easy Transfer 1.7 for iOS - Directory Traversal
    cvelistv5