CVE-2013-2318

LOW 2.6CVE-2013-2318 · Published 06/06/2013 · updated 16/06/2026

In short

CVE-2013-2318 is a LOW (CVSS 2.6) vulnerability affecting movatwitouch (jig), movatwitouch paid (jig).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 71.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
movatwitouch jig	`≤ 1.792`	No fix yet
movatwitouch paid jig	`≤ 1.792`	No fix yet

Description

The Content Provider in the MovatwiTouch application before 1.793 and MovatwiTouch Paid application before 1.793 for Android does not properly restrict access to authorization information, which allows attackers to hijack Twitter accounts via a crafted application.

References

jvn.jp/en/jp/JVN90289505/index.html
jvndb.jvn.jp/jvndb/JVNDB-2013-000047
movatwitter.jugem.jp

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free