Описание
Improper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13 and earlier and 'Skylark' App for iOS 6.2.13 and earlier allows an attacker to lead a user to access an arbitrary website via another application installed on the user's device.
Ссылки
- Product
- Third Party Advisory
- Product
- Product
- Third Party Advisory
- Product
Уязвимые конфигурации
Конфигурация 1Версия до 6.2.13 (включая)Версия до 6.2.13 (включая)
Одно из
cpe:2.3:a:skylark:skylark:*:*:*:*:*:android:*:*
cpe:2.3:a:skylark:skylark:*:*:*:*:*:iphone_os:*:*
EPSS
Процентиль: 19%
0.00062
Низкий
4.7 Medium
CVSS3
Дефекты
CWE-862
Связанные уязвимости
CVSS3: 4.7
github
больше 2 лет назад
Improper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13 and earlier and 'Skylark' App for iOS 6.2.13 and earlier allows an attacker to lead a user to access an arbitrary website via another application installed on the user's device.
EPSS
Процентиль: 19%
0.00062
Низкий
4.7 Medium
CVSS3
Дефекты
CWE-862