Skip to content
OpenAdvisories
Unscored CVE-2023-39507 EUVD-2023-43230GHSA-96qx-whg9-w5rw

Improper authorization in the custom URL scheme handler in "Rikunabi NEXT" App for Android prior to ver. 11.5.0 allows a malicious intent t…

Published Aug 16, 2023 · Updated Oct 8, 2024 · Assigned by jpcert

Vendor: Recruit Product: "Rikunabi NEXT" App for Android Platform: Android

Description

Improper authorization in the custom URL scheme handler in "Rikunabi NEXT" App for Android prior to ver. 11.5.0 allows a malicious intent to lead the vulnerable App to access an arbitrary website.

Affected products

VendorProductAffectedFixed
Recruit "Rikunabi NEXT" App for Android prior to ver. 11.5.0 —

References