CVE-2024-54014CWE-939

Improper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13 and earlier and 'Skylark' App for iOS 6.2.13 and earlier…

Low · published December 5, 2024

CVSS v3.0
3.6
EPSS
0%
Percentile
10.0
In the wild
Unconfirmed
What it is

Improper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13 and earlier and 'Skylark' App for iOS 6.2.13 and earlier allows an attacker to lead the application to access an arbitrary web site via another application installed on the user's device.

The record
Technical detail
CVSS v3.0
3.6 · LOW
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00205 · 10.0th percentile
Weakness
CWE-939 · Improper Authorization in Handler for Custom URL Scheme
Published
2024-12-05T02:42Z
EPSS history
Timeline
  • 05 DEC 02:42Z
    Improper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13 and earlier and 'Skylark' App for iOS 6.2.13 and earlier…
    cvelistv5