CVE-2023-40530

Published: Aug 25, 2023Modified: Jun 17, 2026

4.7

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

Improper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13 and earlier and 'Skylark' App for iOS 6.2.13 and earlier allows an attacker to lead a user to access an arbitrary website via another application installed on the user's device.

Affected (2)

Products: Skylark: Skylark

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Skylark Skylark	Up to 6.2.13
Skylark Skylark	Up to 6.2.13

Related CWEs

Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

References (6)

https://apps.apple.com/jp/app/%E3%81%99%E3%81%8B%E3%81%84%E3%82%89%E3%83%BC%E3%81%8F%E3%82%A2%E3%83%97%E3%83%AA/id906930478

Source: vultures@jpcert.or.jp

Product

https://jvn.jp/en/jp/JVN03447226/

Source: vultures@jpcert.or.jp

Third Party Advisory

https://play.google.com/store/apps/details?id=jp.co.skylark.app.gusto

Source: vultures@jpcert.or.jp

Product

https://apps.apple.com/jp/app/%E3%81%99%E3%81%8B%E3%81%84%E3%82%89%E3%83%BC%E3%81%8F%E3%82%A2%E3%83%97%E3%83%AA/id906930478

Source: af854a3a-2127-422b-91ae-364da2661108

Product

https://jvn.jp/en/jp/JVN03447226/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://play.google.com/store/apps/details?id=jp.co.skylark.app.gusto

Source: af854a3a-2127-422b-91ae-364da2661108

Product

Timeline

No history available yet.