Unscored CVE-2013-5725 EUVD-2013-5562GHSA-qh36-5vfv-6xmm

The Metaclassy Byword app 2.x before 2.1 for iOS does not require confirmation of Replace file actions, which allows remote attackers to ov…

Published Oct 1, 2013 · Updated Sep 17, 2024 · Assigned by mitre

Description

The Metaclassy Byword app 2.x before 2.1 for iOS does not require confirmation of Replace file actions, which allows remote attackers to overwrite arbitrary files via the name and text parameters in a byword://replace URL.

References

20130929 [CVE-2013-5725] - Byword for iOS Data Destruction Vulnerability mailing-list