Medium severity6.2NVD Advisory· Published Feb 3, 2026· Updated Apr 15, 2026

CVE-2020-37086

Description

Easy Transfer 1.7 iOS mobile application contains a directory traversal vulnerability that allows remote attackers to access unauthorized file system paths without authentication. Attackers can exploit the vulnerability by manipulating path parameters in GET and POST requests to list or download sensitive system files and inject malicious scripts into application parameters.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Patches

Vulnerability mechanics

References

apps.apple.com/us/app/easy-transfer-wifi-transfer/id1484667078nvd
www.exploit-db.com/exploits/48395nvd
www.vulncheck.com/advisories/easy-transfer-for-ios-directory-traversalnvd
www.vulnerability-lab.com/get_content.phpnvd

News mentions

No linked articles in our index yet.

cvss	0.403
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000