Description
Improper authorization in handler for custom URL scheme issue in 'ZOZOTOWN' App for Android versions prior to 7.39.6 allows an attacker to lead a user to access an arbitrary website via another application installed on the user's device. As a result, the user may become a victim of a phishing attack.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| ZOZO, Inc. | 'ZOZOTOWN' App for Android | affected |
|
No data.
No data.
No data available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
No advisories yet.
References
| Link | Providers |
|---|---|
| https://jvn.jp/en/jp/JVN37818611/ |
|
History
No history.
Subscriptions
No data.
MITRE
Status: PUBLISHED
Assigner: jpcert
Published:
Updated: 2024-08-02T03:07:46.969Z
Reserved: 2024-05-16T06:34:27.048Z
Link: CVE-2024-35298
Vulnrichment
Updated: 2024-06-21T14:55:41.872Z
NVD
Status : Awaiting Analysis
Published: 2024-06-19T05:15:51.907
Modified: 2024-11-21T09:20:06.100
Link: CVE-2024-35298
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses