CVE-2023-39507

Description

Improper authorization in the custom URL scheme handler in "Rikunabi NEXT" App for Android prior to ver. 11.5.0 allows a malicious intent to lead the vulnerable App to access an arbitrary website.

Related CPE's

References

https://jvn.jp/en/jp/JVN84820712/

CvssV3 impact

CvssV2 impact