Vulnerability in Metaclassy Byword
CVE-2013-5725
The Metaclassy Byword app 2.x before 2.1 for iOS does not require confirmation of Replace file actions, which allows remote attackers to overwrite arbitrary files via the name and text parameters in a byword://replace URL.
EPSS: 0.011 (61.5th percentile) — read the EPSS interpretation.
Affected products
- Metaclassy Byword — versions 2.0.0, 2.0.1, 2.0.2
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (mailing-list, Exploit, x_refsource_BUGTRAQ)