CVE-2021-20873

 

Published at: - 28-12-2021 03:15

Last modified: - 12-01-2022 04:46

Total changes: - 2

Description

Yappli is an application development platform which provides the function to access a requested URL using Custom URL Scheme. When Android apps are developed with Yappli versions since v7.3.6 and prior to v9.30.0, they are vulnerable to improper authorization in Custom URL Scheme handler, and may be directed to unintended sites via a specially crafted URL.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

 

Verification logic

 

Reference

• https://jvn.jp/en/jp/JVN66422035/index.html
• https://support.yappli.co.jp/hc/ja/articles/4410249902745

 

Keywords

NVD

 

CVE-2021-20873

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures