Skip to content
OpenAdvisories
Unscored CVE-2021-20747 EUVD-2021-8161GHSA-6669-c2mr-pv93

Improper authorization in handler for custom URL scheme vulnerability in Retty App for Android versions prior to 4.8.13 and Retty App for i…

Published Jul 14, 2021 · Updated Aug 3, 2024 · Assigned by jpcert

Description

Improper authorization in handler for custom URL scheme vulnerability in Retty App for Android versions prior to 4.8.13 and Retty App for iOS versions prior to 4.11.14 allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App.

Affected products

VendorProductAffectedFixed
Retty Retty App Retty App for Android versions prior to 4.8.13 and Retty App for iOS versions prior to 4.11.14 —

References