CVE-2023-40530

Published: Aug 25, 2023

Modified: Oct 2, 2024

PUBLISHED

Description

Improper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13 and earlier and 'Skylark' App for iOS 6.2.13 and earlier allows an attacker to lead a user to access an arbitrary website via another application installed on the user's device.

Vendor	Product	Versions
SKYLARK HOLDINGS CO., LTD.	'Skylark' App for Android	affected `6.2.13 and earlier`
SKYLARK HOLDINGS CO., LTD.	'Skylark' App for iOS	affected `6.2.13 and earlier`

References

https://play.google.com/store/apps/details?id=jp.co.skylark.app.gusto

https://apps.apple.com/jp/app/%E3%81%99%E3%81%8B%E3%81%84%E3%82%89%E3%83%BC%E3%81%8F%E3%82%A2%E3%83%97%E3%83%AA/id906930478

https://jvn.jp/en/jp/JVN03447226/

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2023-40530

Description

Affected Products

References