CVE-2024-28745

2024-03-1803:18:21

jpcert

www.cve.org

android application components

abema app

arbitrary url

intent

phishing attack

AI Score

6.7

Confidence

Low

EPSS

Percentile

9.0%

JSON

Improper export of Android application components issue exists in ‘ABEMA’ App for Android prior to 10.65.0 allowing another app installed on the user’s device to access an arbitrary URL on ‘ABEMA’ App for Android via Intent. If this vulnerability is exploited, an arbitrary website may be displayed on the app, and as a result, the user may become a victim of a phishing attack.

CNA Affected

[
  {
    "vendor": "AbemaTV, Inc.",
    "product": "'ABEMA' App for Android",
    "versions": [
      {
        "version": "prior to 10.65.0",
        "status": "affected"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN70640802/