VULNERABILITY INTELLIGENCE

CVE-2013-5157

CVSS score5 MEDIUM
EPSS probability1.46%
CISA KEVNot currently listed
Published2013-09-19
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N

Description

The Twitter subsystem in Apple iOS before 7 does not require API conformity for access to Twitter daemon interfaces, which allows attackers to post Tweets via a crafted app that sends direct requests to the daemon.

Primary references