CVE-2024-54125

Published Dec 17, 2024

Last updated 2 months ago

CVSS low 3.3

Overview

Description
Improper authorization in handler for custom URL scheme issue in "Shonen Jump+" App for Android versions prior to 4.0.0 allows an attacker to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a phishing attack.
Source
vultures@jpcert.or.jp
NVD status
Received

Risk scores

CVSS 3.0

Type
Secondary
Base score
3.3
Impact score
1.4
Exploitability score
1.8
Vector string
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Severity
LOW

Weaknesses

vultures@jpcert.or.jp
CWE-939

Social media

Hype score
Not currently trending

  1. CVE-2024-54125 Improper authorization in handler for custom URL scheme issue in "Shonen Jump+" App for Android versions prior to 4.0.0 allows an attacker to lead a user to access an… https://t.co/TBa0cPkWO4

    @CVEnew

    17 Dec 2024

    455 Impressions

    0 Retweets

    2 Likes

    2 Bookmarks

    0 Replies

    0 Quotes

References