CVE-2024-41918lowCWE-939

CVE-2024-41918: low-severity vulnerability in Rakuten Group, Inc. 'Rakuten Ichiba App' for…

Published

Follow this CVE+ Monitor 'Rakuten Ichiba App'

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 3.1epss 0.3%
'Rakuten Ichiba App' for Android 12.4.0 and earlier and 'Rakuten Ichiba App' for iOS 11.7.0 and earlier are vulnerable to improper authorization in handler for custom URL scheme. An arbitrary site may be displayed on the WebView of the product via Intent from another application installed on the user's device. As a result, the user may be redirected to an unauthorized site, and the user may become a victim of a phishing attack.
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
Affected products
Rakuten Group, Inc. · 'Rakuten Ichiba App' for AndroidRakuten Group, Inc. · 'Rakuten Ichiba App' for iOS