Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h642-mphj-q5v4

Опубликовано: 05 сент. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 5.3
CVSS3: 4.3

Описание

Improper authorization in handler for custom URL scheme issue in "Yahoo! Shopping" App for Android versions prior to 14.15.0 allows a remote unauthenticated attacker may lead a user to access an arbitrary website on the vulnerable App. As a result, the user may become a victim of a phishing attack.

Improper authorization in handler for custom URL scheme issue in "Yahoo! Shopping" App for Android versions prior to 14.15.0 allows a remote unauthenticated attacker may lead a user to access an arbitrary website on the vulnerable App. As a result, the user may become a victim of a phishing attack.

EPSS

Процентиль: 17%
0.00053
Низкий

5.3 Medium

CVSS4

4.3 Medium

CVSS3

Дефекты

CWE-939

Связанные уязвимости

CVSS3: 4.3
nvd
5 месяцев назад

Improper authorization in handler for custom URL scheme issue in "Yahoo! Shopping" App for Android versions prior to 14.15.0 allows a remote unauthenticated attacker may lead a user to access an arbitrary website on the vulnerable App. As a result, the user may become a victim of a phishing attack.

EPSS

Процентиль: 17%
0.00053
Низкий

5.3 Medium

CVSS4

4.3 Medium

CVSS3

Дефекты

CWE-939