CVE-2019-20061

CVE-2019-20061 describes a critical information disclosure vulnerability in MFScripts YetiShare versions 3.5.2 through 4.5.4, where the system-generated password for new users is transmitted in cleartext via the user-introduction email. This allows an attacker to intercept the email and gain unauthorized access to user accounts. With a CVSS score of 7.5 (High), this vulnerability is easily exploitable over the network with low complexity, potentially leading to full compromise of user accounts. There is currently no evidence of active exploitation, nor are there publicly available exploit modules or significant community discussion surrounding this CVE.