| Package | Affected versions | Patched versions |
|---|---|---|
| byword | = 2.0.0= 2.0.1= 2.0.2= 2.0.3 |
The Metaclassy Byword app 2.x before 2.1 for iOS does not require confirmation of Replace file actions, which allows remote attackers to overwrite arbitrary files via the name and text parameters in a byword://replace URL.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free