CVE-2021-41971

Apache Superset up to and including 1.3.0 when configured with ENABLETEMPLATEPROCESSING on disabled by default allowed SQL injection when a malicious authenticated user sends an http request with a custom URL...

Apache Superset up SQL注入漏洞

Apache Superset is a modern enterprise-grade business intelligence web application. Apache Superset 1.3.0 and earlier versions have a SQL injection vulnerability when ENABLETEMPLATEPROCESSING is enabled. An authenticated attacker can exploit this vulnerability by sending an http request with a...

Authorization

Improper authorization in handler for custom URL scheme vulnerability in Nike App for Android versions prior to 2.177 and Nike App for iOS versions prior to 2.177.1 allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App...

CVE-2021-20834

Improper authorization in handler for custom URL scheme vulnerability in Nike App for Android versions prior to 2.177 and Nike App for iOS versions prior to 2.177.1 allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App...

JVN#89126639: Nike App fails to restrict custom URL schemes properly

Nike App by Nike, Inc. provides the function to access a requested URL using Custom URL Scheme. The app does not restrict access to the function properly CWE-939 which may be exploited to direct the app to access any sites. Impact A remote attacker may lead a user to access an arbitrary website v...

Custom URL type for host to client redirection not working

To redirect a custom URL jnlp using host to client redirection...

CVE-2021-20747

Improper authorization in handler for custom URL scheme vulnerability in Retty App for Android versions prior to 4.8.13 and Retty App for iOS versions prior to 4.11.14 allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App...

Authorization

Improper authorization in handler for custom URL scheme vulnerability in Retty App for Android versions prior to 4.8.13 and Retty App for iOS versions prior to 4.11.14 allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App...

CVE-2021-20747

Improper authorization in handler for custom URL scheme vulnerability in Retty App for Android versions prior to 4.8.13 and Retty App for iOS versions prior to 4.11.14 allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App...

CVE-2021-20747

CVE-2021-20747 concerns the Retty App (Android prior to 4.8.13, iOS prior to 4.11.14). The vulnerability is improper authorization in the custom URL scheme handler, which can let a remote attacker direct a user to an arbitrary website via the vulnerable app. Impact is described as user-directed n...

JVN#26891339: Multiple vulnerabilities in Retty App

Retty App provided by Retty Inc. contains multiple vulnerabilities listed below. The app is launched by Custom URL Scheme and a user may be led to access an arbitrary URL CWE-939 - CVE-2021-20747 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N| Base Score:...

Authorization

Improper authorization in handler for custom URL scheme vulnerability in GU App for Android versions from 4.8.0 to 5.0.2 allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App...

CVE-2021-20777

CVE-2021-20777 affects GU App for Android (versions 4.8.0–5.0.2). The issue is improper authorization in the handler for a Custom URL Scheme, allowing a remote attacker to direct a user to an arbitrary website via the vulnerable app. Impact is user-directed navigation to potentially malicious sit...

CVE-2021-20733

Improper authorization in handler for custom URL scheme vulnerability in あすけんダイエット asken diet for Android versions from v.3.0.0 to v.4.2.x allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App...

Authorization

Improper authorization in handler for custom URL scheme vulnerability in ????????? asken diet for Android versions from v.3.0.0 to v.4.2.x allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App...

CVE-2021-20733

Improper authorization in handler for custom URL scheme vulnerability in あすけんダイエット asken diet for Android versions from v.3.0.0 to v.4.2.x allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App...

CVE-2021-20733

CVE-2021-20733 concerns Asken Diet (Android) where improper authorization in the handler for a custom URL scheme allows a remote attacker to steer a user to an arbitrary website via the vulnerable app. Affected versions are v3.0.0 through v4.2.x. The root cause is insufficient access control arou...

PT-2021-14189 · あすけんダイエット · あすけんダイエット

Name of the Vulnerable Software and Affected Versions: あすけんダイエット asken diet versions 3.0.0 through 4.2.x Description: The issue is related to improper authorization in the handler for a custom URL scheme, allowing a remote attacker to lead a user to access an arbitrary website via the vulnerable...

Aptar CMS has a flawed logic vulnerability

Aptar CMS website management system adopts PHP+MYSQL technology, supports pseudo-static function, can generate google and baidu maps, supports custom url, keywords and description, and facilitates SEO search. Aptar CMS has a logic flaw vulnerability that can be exploited by attackers to compromis...

Asken App for Android fails to restrict custom URL schemes properly

Overview Asken App for Android by asken Inc. provides the function to access a requested URL using Custom URL Scheme. The App does not restrict access to the function properly CWE-939 which may be exploited to direct the App to access any sites. Impact A remote attacker may lead a user to access ...