CVE-2019-8791

2019-12-1817:33:23

apple

www.cve.org

AI Score

5.3

Confidence

High

EPSS

0.001

Percentile

35.0%

JSON

An issue existed in the parsing of URL schemes. This issue was addressed with improved URL validation. This issue is fixed in Shazam Android App Version 9.25.0, Shazam iOS App Version 12.11.0. Processing a maliciously crafted URL may lead to an open redirect.

CNA Affected

[
  {
    "product": "Shazam-Android",
    "vendor": "Apple",
    "versions": [
      {
        "lessThan": "Shazam Android App Version 9.25.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Shazam-iOS",
    "vendor": "Apple",
    "versions": [
      {
        "lessThan": "Shazam iOS App Version 12.11.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

support.apple.com/HT210744

support.apple.com/HT210745