CVE Catalog
CVE-2023-39507
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk0.32%
24th percentile - higher than 24% of all known CVEs
Summary
The 'Rikunabi NEXT' app for Android prior to version 11.5.0 has improper authorization in the custom URL scheme handler, allowing a malicious intent to direct the app to access an arbitrary website.
Risk Assessment
The organization may be exposed to phishing attacks or other malicious actions that could lead to user data leakage or system compromise.
Recommendation
It is recommended to update the 'Rikunabi NEXT' app to version 11.5.0 or later to mitigate this vulnerability.
Original NVD description (English source)
Improper authorization in the custom URL scheme handler in "Rikunabi NEXT" App for Android prior to ver. 11.5.0 allows a malicious intent to lead the vulnerable App to access an arbitrary website.