Skip to content
OpenAdvisories
Unscored CVE-2021-20834 EUVD-2021-8246GHSA-v53j-jcc3-2p22

Improper authorization in handler for custom URL scheme vulnerability in Nike App for Android versions prior to 2.177 and Nike App for iOS …

Published Oct 13, 2021 · Updated Aug 3, 2024 · Assigned by jpcert

Vendor: Nike Product: Nike App for Android versions prior to 2.177 and Nike App for iOS versions prior to 2.177.1 Platform: Android Platform: iOS

Description

Improper authorization in handler for custom URL scheme vulnerability in Nike App for Android versions prior to 2.177 and Nike App for iOS versions prior to 2.177.1 allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App.

Affected products

VendorProductAffectedFixed
Nike Nike App for Android versions prior to 2.177 and Nike App for iOS versions prior to 2.177.1 Nike App for Android versions prior to 2.177 and Nike App for iOS versions prior to 2.177.1 —

References