CVE-2013-4873: Yahoo Tumblr

Medium severity, CVSS 5.0. EPSS: 2.1% chance of exploitation in the next 30 days.

The Yahoo! Tumblr app before 3.4.1 for iOS sends cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network.

Affected products

• Yahoo Tumblr: up to and including 3.4.0

Published 2013-07-18. Last modified 2026-06-16.