CVE-2024-54125

Published: Dic 17, 2024 Last Modified: Dic 17, 2024 EU-VD ID: EUVD-2024-52301
ExploitDB:
Other exploit source:
Google Dorks:
LOW 3,3
Source: [email protected]
Attack Vector: local
Attack Complexity: low
Privileges Required: none
User Interaction: required
Scope: unchanged
Confidentiality: none
Integrity: low
Availability: none

Description

AI Translation Available

Improper authorization in handler for custom URL scheme issue in 'Shonen Jump+' App for Android versions prior to 4.0.0 allows an attacker to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a phishing attack.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,0003
Percentile
0,1th
Updated

EPSS Score Trend (Last 90 Days)

939

Improper Authorization in Handler for Custom URL Scheme

Incomplete
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Access Control Other
Potential Impacts:
Gain Privileges Or Assume Identity Varies By Context Bypass Protection Mechanism
Applicable Platforms
Technologies: Mobile
View CWE Details
https://jvn.jp/en/jp/JVN08430039/
https://jvn.jp/en/jp/JVN08430039/
https://shonenjumpplus.com/article/info20241216
https://shonenjumpplus.com/article/info20241216