CVE-2023-40530

State: Published
Severity: Not scored
Published: Aug 25, 2023
Updated: Oct 2, 2024
Reserved: Aug 15, 2023

Description

Improper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13 and earlier and 'Skylark' App for iOS 6.2.13 and earlier allows an attacker to lead a user to access an arbitrary website via another application installed on the user's device.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
'Skylark' App for AndroidSKYLARK HOLDINGS CO., LTD.	6.2.13 and earlierAffected
'Skylark' App for iOSSKYLARK HOLDINGS CO., LTD.	6.2.13 and earlierAffected

References

https://play.google.com/store/apps/details?id=jp.co.skylark.app.gusto
https://apps.apple.com/jp/app/%E3%81%99%E3%81%8B%E3%81%84%E3%82%89%E3%83%BC%E3%81%8F%E3%82%A2%E3%83%97%E3%83%AA/id906930478
https://jvn.jp/en/jp/JVN03447226/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.