CVE-2013-5725

2013-10-0100:55:12

CWE-264

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.5

Confidence

Low

EPSS

0.003

Percentile

69.7%

JSON

The Metaclassy Byword app 2.x before 2.1 for iOS does not require confirmation of Replace file actions, which allows remote attackers to overwrite arbitrary files via the name and text parameters in a byword://replace URL.

Affected configurations

Nvd

Node

metaclassybywordMatch2.0.0

metaclassybywordMatch2.0.1

metaclassybywordMatch2.0.2

metaclassybywordMatch2.0.3

VendorProductVersionCPE
metaclassybyword2.0.0cpe:2.3:a:metaclassy:byword:2.0.0:*:*:*:*:*:*:*
metaclassybyword2.0.1cpe:2.3:a:metaclassy:byword:2.0.1:*:*:*:*:*:*:*
metaclassybyword2.0.2cpe:2.3:a:metaclassy:byword:2.0.2:*:*:*:*:*:*:*
metaclassybyword2.0.3cpe:2.3:a:metaclassy:byword:2.0.3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
metaclassy	byword	2.0.0	cpe:2.3:a:metaclassy:byword:2.0.0:::::::*
metaclassy	byword	2.0.1	cpe:2.3:a:metaclassy:byword:2.0.1:::::::*
metaclassy	byword	2.0.2	cpe:2.3:a:metaclassy:byword:2.0.2:::::::*
metaclassy	byword	2.0.3	cpe:2.3:a:metaclassy:byword:2.0.3:::::::*