CVE-2013-5726

MEDIUM · CVSS 6.8 EPSS 1.06%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2013-11-12 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2013-5726

Severity

MEDIUM

CVSS

6.8

EPSS

1.06%

Original NVD Description

Tweetbot 1.3.3 for Mac, and 2.8.5 for iPad and iPhone, does not require confirmation of (1) follow or (2) favorite actions, which allows remote attackers to automatically force the user to perform undesired actions, as demonstrated via the tweetbot:///follow/ URL.