CVE-2024-54125

Published: Dec 17, 2024Modified: Jun 17, 2026Deferred

3.3

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Exploitability: 1.8 / Impact: 1.4

Source: vultures@jpcert.or.jp (Secondary)

Description

Improper authorization in handler for custom URL scheme issue in "Shonen Jump+" App for Android versions prior to 4.0.0 allows an attacker to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a phishing attack.

Related CWEs

CWE-939

Improper Authorization in Handler for Custom URL Scheme

The product uses a handler for a custom URL scheme, but it does not properly restrict which actors can invoke the handler using the scheme.

References (2)

https://jvn.jp/en/jp/JVN08430039/

Source: vultures@jpcert.or.jp

https://shonenjumpplus.com/article/info20241216

Source: vultures@jpcert.or.jp

Timeline

No history available yet.