Description (CNA)
Improper authorization in handler for custom URL scheme vulnerability in Lemon8 App for Android versions prior to 3.3.5 and Lemon8 App for iOS versions prior to 3.3.5 allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a phishing attack.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| ByteDance K.K. / Lemon8 App for Android and Lemon8 App for iOS | affected Lemon8 App for Android versions prior to 3.3.5 and Lemon8 App for iOS versions prior to 3.3.5 |
CWE
No CWE identifiers supplied.
References
- https://play.google.com/store/apps/details?id=com.bd.nproject&hl=ja&gl=US
- https://apps.apple.com/jp/app/lemon8/id1498607143
- https://jvn.jp/en/jp/JVN10921428/index.html
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.