← CVE Intelligence

CVE-2024-35298

ZOZO, Inc. / 'ZOZOTOWN' App for Android PUBLISHED

Description (CNA)

Improper authorization in handler for custom URL scheme issue in 'ZOZOTOWN' App for Android versions prior to 7.39.6 allows an attacker to lead a user to access an arbitrary website via another application installed on the user's device. As a result, the user may become a victim of a phishing attack.

Affected (CNA)

Vendor / productVersions
ZOZO, Inc. / 'ZOZOTOWN' App for Androidaffected prior to 7.39.6

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.