CVE-2022-41797

 

Published at: - 24-10-2022 04:15

Last modified: - 25-10-2022 04:31

Total changes: - 2

Description

Improper authorization in handler for custom URL scheme vulnerability in Lemon8 App for Android versions prior to 3.3.5 and Lemon8 App for iOS versions prior to 3.3.5 allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a phishing attack.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

 

Verification logic

 

Reference

• https://jvn.jp/en/jp/JVN10921428/index.html
• https://play.google.com/store/apps/details?id=com.bd.nproject&hl=ja&gl=US
• https://apps.apple.com/jp/app/lemon8/id1498607143

 

Keywords

NVD

 

CVE-2022-41797

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures