CVE-2013-5725

The Metaclassy Byword app 2.x before 2.1 for iOS does not require confirmation of Replace file actions, which allows remote attackers to overwrite arbitrary files via the name and text parameters in a byword://replace URL.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:metaclassy:byword:2.0.1:*:*:*:*:*:*:*
cpe:2.3:a:metaclassy:byword:2.0.2:*:*:*:*:*:*:*
cpe:2.3:a:metaclassy:byword:2.0.3:*:*:*:*:*:*:*
cpe:2.3:a:metaclassy:byword:2.0.0:*:*:*:*:*:*:*

Information

Published : 2013-09-30 17:55

Updated : 2013-10-08 14:21


NVD link : CVE-2013-5725

Mitre link : CVE-2013-5725


JSON object : View

CWE
CWE-264

Permissions, Privileges, and Access Controls

Advertisement

dedicated server usa

Products Affected

metaclassy

  • byword