CVEvulnerability
CVE-2023-40530
4.7 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-08-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.7 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
- Weaknesses
- CWE-862
Description
Improper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13 and earlier and 'Skylark' App for iOS 6.2.13 and earlier allows an attacker to lead a user to access an arbitrary website via another application installed on the user's device.
Affected configurations
• skylark skylark (<= 6.2.13)
Related
Weakness · CWE (1)
- CWE-862 Missing Authorization weakness
References
- https://apps.apple.com/jp/app/%E3%81%99%E3%81%8B%E3%81%84%E3%82%89%E3%83%BC%E3%81%8F%E3%82%A2%E3%83%97%E3%83%AA/id906930478 Product
- https://jvn.jp/en/jp/JVN03447226/ Third Party Advisory
- https://play.google.com/store/apps/details?id=jp.co.skylark.app.gusto Product
- https://apps.apple.com/jp/app/%E3%81%99%E3%81%8B%E3%81%84%E3%82%89%E3%83%BC%E3%81%8F%E3%82%A2%E3%83%97%E3%83%AA/id906930478 Product
- https://jvn.jp/en/jp/JVN03447226/ Third Party Advisory
- https://play.google.com/store/apps/details?id=jp.co.skylark.app.gusto Product