Vulnerability in Skylark Holdings Co., Ltd. 'Skylark' App For Android
CVE-2024-54014
Improper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13 and earlier and 'Skylark' App for iOS 6.2.13 and earlier allows an attacker to lead the application to access an arbitrary web site via anoth…
EPSS: 0.001 (15.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 3.6 (Low). Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N.
Affected products
- Skylark Holdings Co., Ltd. 'Skylark' App For Android — versions 6.2.13 and earlier
- Skylark Holdings Co., Ltd. 'Skylark' App For Ios — versions 6.2.13 and earlier
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2024-54014?
- CVE-2024-54014 is a low-severity vulnerability in Skylark Holdings Co., Ltd. 'Skylark' App For Android, classified under CWE-939. CVSS score: 3.6/10. Published 2024-12-05.
- How severe is CVE-2024-54014?
- Low severity. CVSS v3 base score is 3.6 out of 10.