CVE-2022-41797
CVE-2022-41797
Vexday Risk Score
13Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 6.5EPSS 0.9%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
24 oct 2022Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
Improper authorization in handler for custom URL scheme vulnerability in Lemon8 App for Android versions prior to 3.3.5 and Lemon8 App for iOS versions prior to 3.3.5 allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a phishing attack.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Productos afectados
ByteDance K.K. · Lemon8 App for Android and Lemon8 App for iOS¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →