VULNERABILITY INTELLIGENCE
CVE-2023-40530
CVSS score4.7 MEDIUM
EPSS probability0.58%
CISA KEVNot currently listed
Published2023-08-25
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
Description
Improper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13 and earlier and 'Skylark' App for iOS 6.2.13 and earlier allows an attacker to lead a user to access an arbitrary website via another application installed on the user's device.
Weakness classification
- nvd@nist.gov: CWE-862
Primary references
- vultures@jpcert.or.jp — Product
- vultures@jpcert.or.jp — Third Party Advisory
- vultures@jpcert.or.jp — Product
- af854a3a-2127-422b-91ae-364da2661108 — Product
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Product