CVEvulnerability

CVE-2013-5725

5.0 MEDIUM Published 2013-10-01 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-10-01
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
Weaknesses
CWE-264

Description

The Metaclassy Byword app 2.x before 2.1 for iOS does not require confirmation of Replace file actions, which allows remote attackers to overwrite arbitrary files via the name and text parameters in a byword://replace URL.

Affected configurations

• metaclassy byword 2.0.0 • metaclassy byword 2.0.1 • metaclassy byword 2.0.2 • metaclassy byword 2.0.3

Related

Weakness · not in database (1)

Referenced by CWE · observed example (1)

  • CWE-939 Improper Authorization in Handler for Custom URL Scheme weakness

References