Improper authorization in handler for custom URL scheme issue in "Mercari" App for Android prior to version 5.78.0 allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a phishing attack.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://jvn.jp/en/jp/JVN70818619/ |
History
No history.
MITRE
Status: PUBLISHED
Assigner: jpcert
Published: 2024-01-26T07:07:23.529Z
Updated: 2024-08-01T23:06:24.241Z
Reserved: 2024-01-16T05:50:38.250Z
Link: CVE-2024-23388
Vulnrichment
No data.
NVD
Status : Modified
Published: 2024-01-26T07:15:59.320
Modified: 2024-11-21T08:57:42.427
Link: CVE-2024-23388
Redhat
No data.