CVE-2024-54014
Last modified
CVE-2024-54014 is a low-severity vulnerability rated 3.6/10 on the CVSS scale. Improper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13 and earlier and 'Skylark' App for iOS 6.2.13 and earlier allows an attacker to lead the application to access an arbitrary web site via another application installed on the user's device.. EPSS estimates a 0.19% chance of exploitation in the next 30 days.
Description
Improper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13 and earlier and 'Skylark' App for iOS 6.2.13 and earlier allows an attacker to lead the application to access an arbitrary web site via another application installed on the user's device.
Metrics
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| SKYLARK HOLDINGS CO., LTD. | 'Skylark' App for Android | 6.2.13 and earlier |
| SKYLARK HOLDINGS CO., LTD. | 'Skylark' App for iOS | 6.2.13 and earlier |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2024-54014?
How severe is CVE-2024-54014?
How do I fix CVE-2024-54014?
How Strix Helps
- One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-54009Remote authentication bypass vulnerability in HPE Alletra St…4
- CVE-2024-5401Improper control of dynamically-managed code resources vulne…8.8
- CVE-2024-54010A vulnerability in the firewall component of HPE Aruba Netwo…3.4
- CVE-2024-54011Penetration Testing engineers at Amazon have discovered a fl…6.5
- CVE-2024-54012Penetration Testing engineers at Amazon discovered a vulnera…5.3
- CVE-2024-54013Penetration Testing engineers at Amazon have identified a se…8.8
- CVE-2024-54015A vulnerability has been identified in SIPROTEC 5 6MD84 (CP3…8.7
- CVE-2024-54016Improper Handling of Highly Compressed Data (Data Amplificat…4.3
- CVE-2024-54017A vulnerability has been identified in SIPROTEC 5 6MD84 (CP3…6.9
- CVE-2024-54018Multiple improper neutralization of special elements used in…7.2
- CVE-2024-54019A improper validation of certificate with host mismatch in F…6.5
- CVE-2024-5402Unquoted Search Path or Element vulnerability in ABB Mint Wo…7.8
Are you affected by CVE-2024-54014?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST