Skip to content
OpenAdvisories
Unscored CVE-2013-2318 EUVD-2013-2264GHSA-938p-2whj-rv48

The Content Provider in the MovatwiTouch application before 1.793 and MovatwiTouch Paid application before 1.793 for Android does not prope…

Published Jun 6, 2013 · Updated Sep 17, 2024 · Assigned by jpcert

Description

The Content Provider in the MovatwiTouch application before 1.793 and MovatwiTouch Paid application before 1.793 for Android does not properly restrict access to authorization information, which allows attackers to hijack Twitter accounts via a crafted application.

References