CVE-2023-39507 — Recruit Co., Ltd. / "Rikunabi NEXT" App for Android

CVE-2023-39507

Recruit Co., Ltd. / "Rikunabi NEXT" App for Android PUBLISHED

Description (CNA)

Improper authorization in the custom URL scheme handler in "Rikunabi NEXT" App for Android prior to ver. 11.5.0 allows a malicious intent to lead the vulnerable App to access an arbitrary website.

Affected (CNA)

Vendor / product	Versions
Recruit Co., Ltd. / "Rikunabi NEXT" App for Android	affected prior to ver. 11.5.0

CWE

No CWE identifiers supplied.

References

https://jvn.jp/en/jp/JVN84820712/

ADP enrichment

CVE

No English description supplied.

https://jvn.jp/en/jp/JVN84820712/

CISA-ADP

No English description supplied.

No references supplied.