CVE-2013-3647
Last modified
CVE-2013-3647 is a vulnerability of currently unknown severity. The WebView class in the Cybozu Live application before 2.0.1 for Android allows attackers to execute arbitrary JavaScript code, and obtain sensitive information, via a crafted application that places this code into a local file associated with a file: URL. NOTE: this vulnerability exists because of a CVE-2012-4009 regression.. EPSS estimates a 1.08% chance of exploitation in the next 30 days.
Description
The WebView class in the Cybozu Live application before 2.0.1 for Android allows attackers to execute arbitrary JavaScript code, and obtain sensitive information, via a crafted application that places this code into a local file associated with a file: URL. NOTE: this vulnerability exists because of a CVE-2012-4009 regression.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cybozu | Cybozu Live | <= 2.0.0 |
| Cybozu | Cybozu Live | 1.0.4 |
References
- http://jvndb.jvn.jp/jvndb/JVNDB-2013-000060Vendor Advisory
- https://live.cybozu.co.jp/trouble.html?q=2530Vendor Advisory
- http://jvndb.jvn.jp/jvndb/JVNDB-2013-000060Vendor Advisory
- https://live.cybozu.co.jp/trouble.html?q=2530Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2013-3647?
How severe is CVE-2013-3647?
How do I fix CVE-2013-3647?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2013
- CVE-2013-3641The Pizza Hut Japan Official Order application before 1.1.1.…
- CVE-2013-3642The Angel Browser application 1.47b and earlier for Android …
- CVE-2013-3643The Galapagos Browser application for Android does not prope…
- CVE-2013-3644Unspecified vulnerability in JustSystems Ichitaro 2006 throu…
- CVE-2013-3645Cross-site scripting (XSS) vulnerability in the Orchard.Comm…
- CVE-2013-3646The Cybozu Live application before 2.0.1 for Android allows …
- CVE-2013-3648Cross-site scripting (XSS) vulnerability in KENT-WEB POST-MA…
- CVE-2013-3649Cross-site scripting (XSS) vulnerability in KENT-WEB CLIP-MA…
- CVE-2013-3650Directory traversal vulnerability in the lfCheckFileName fun…
- CVE-2013-3651LOCKON EC-CUBE 2.11.2 through 2.12.4 allows remote attackers…
- CVE-2013-3652Cross-site scripting (XSS) vulnerability in data/class/pages…
- CVE-2013-3653Multiple cross-site scripting (XSS) vulnerabilities in the R…
Are you affected by CVE-2013-3647?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST