CVE-2024-54014 LOW

CVE-2024-54014

Vendor Skylark Holdings Co., Ltd.
Product 'Skylark' App for Android
Weakness CWE-939
Published December 5, 2024
Last update December 5, 2024
View on NVD All CVEs

CVSS base score

3.6/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

What the vulnerability does

01Description

Improper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13 and earlier and 'Skylark' App for iOS 6.2.13 and earlier allows an attacker to lead the application to access an arbitrary web site via another application installed on the user's device.

Key dates

02Disclosure timeline

December 5, 2024 CVE published
December 5, 2024 Record updated