2 matches found
CVE-2023-39507: Missing Authorization
Improper authorization in the custom URL scheme handler in "Rikunabi NEXT" App for Android prior to ver. 11.5.0 allows a malicious intent to lead the vulnerable App to access an arbitrary website...
6.1CVSS5.9AI score0.0037EPSS
SaveExploits0References2
PT-2021-14311
Name of the Vulnerable Software and Affected Versions: Yappli versions 7.3.6 through 9.29.9 Description: The issue concerns improper authorization in the Custom URL Scheme handler. When exploited, it may direct users to unintended sites via a specially crafted URL. Recommendations: For Yappli...
8.1CVSS0.00842EPSS
SaveExploits0References4
20