CVE-2013-3647

Cybozu Live < 2.0.1 - Exposure of Sensitive Information via WebView Local File Handling

Title source: llm
STIX 2.1

Description

The WebView class in the Cybozu Live application before 2.0.1 for Android allows attackers to execute arbitrary JavaScript code, and obtain sensitive information, via a crafted application that places this code into a local file associated with a file: URL. NOTE: this vulnerability exists because of a CVE-2012-4009 regression.

References (3)

Core 3
Core References
Vendor Advisory third-party-advisory x_refsource_jvndb
http://jvndb.jvn.jp/jvndb/JVNDB-2013-000060
Third Party Advisory third-party-advisory x_refsource_jvn
http://jvn.jp/en/jp/JVN19740283/index.html
Vendor Advisory x_refsource_confirm
https://live.cybozu.co.jp/trouble.html?q=2530

Scores

EPSS 0.0040
EPSS Percentile 60.6%

Details

CWE
CWE-200
Status published
Products (2)
cybozu/cybozu_live 1.0.4
cybozu/cybozu_live < 2.0.0
Published Jun 18, 2013
Tracked Since Feb 18, 2026