Lucene search

K
nvd[email protected]NVD:CVE-2024-35298
HistoryJun 19, 2024 - 5:15 a.m.

CVE-2024-35298

2024-06-1905:15:51
web.nvd.nist.gov
2
improper authorization
zozotown
android app
phishing attack
custom url scheme

0.0004 Low

EPSS

Percentile

9.1%

Improper authorization in handler for custom URL scheme issue in β€˜ZOZOTOWN’ App for Android versions prior to 7.39.6 allows an attacker to lead a user to access an arbitrary website via another application installed on the user’s device. As a result, the user may become a victim of a phishing attack.

0.0004 Low

EPSS

Percentile

9.1%

Related for NVD:CVE-2024-35298