CVE-2019-13100

6.5 mediumEPSS 0.8%

The Send Anywhere application 9.4.18 for Android stores confidential information insecurely on the system (i.e., in cleartext), which allows a non-root user to find out the username/password of a valid user via /data/data/com.estmob.android.sendanywhere/shared_prefs/sendanywhere_device.xml.

Severity

CVSS 3.0

6.5 medium

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
CWE: CWE-312
Published: 2019-07-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

send-anywhere:send_anywhere

References

https://pastebin.com/Gdd0Shgr
https://pastebin.com/Gdd0Shgr

Check your stack JSON