CVEvulnerability

CVE-2024-54014

3.6 LOW Published 2024-12-05 Modified 2026-06-17 Official page ↗

Status: Deferred
Published: 2024-12-05
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.0 ([email protected]): 3.6 LOW — CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
Weaknesses: CWE-939

Description

Improper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13 and earlier and 'Skylark' App for iOS 6.2.13 and earlier allows an attacker to lead the application to access an arbitrary web site via another application installed on the user's device.

Weakness · CWE (1)

CWE-939 Improper Authorization in Handler for Custom URL Scheme weakness

References

https://apps.apple.com/jp/app/%E3%81%99%E3%81%8B%E3%81%84%E3%82%89%E3%83%BC%E3%81%8F%E3%82%A2%E3%83%97%E3%83%AA/id906930478 apps.apple.com
https://jvn.jp/en/jp/JVN03447226/ jvn.jp
https://play.google.com/store/apps/details?id=jp.co.skylark.app.gusto play.google.com

CVE-2024-54014

Description

Related

Weakness · CWE (1)

References