Vulnerability in Jig Movatwitouch
CVE-2013-2318
The Content Provider in the MovatwiTouch application before 1.793 and MovatwiTouch Paid application before 1.793 for Android does not properly restrict access to authorization information, which allows attackers to hijack Twitter accounts via a crafted application.
EPSS: 0.013 (68.3th percentile) — read the EPSS interpretation.
Affected products
- Jig Movatwitouch
- Jig Movatwitouch_paid
- N/a — versions n/a
Weakness classification (CWE)
References
- vultures@jpcert.or.jp (x_refsource_JVN, third-party-advisory)
- vultures@jpcert.or.jp (x_refsource_CONFIRM)
- vultures@jpcert.or.jp (x_refsource_JVNDB, third-party-advisory)