CVE-2023-40530
MediumCVSS 4.7Exploitation Probability (EPSS)
Low risk38th percentile - higher than 38% of all known CVEs
Summary
The 'Skylark' App for Android version 6.2.13 and earlier and for iOS version 6.2.13 and earlier has improper authorization in the handler for custom URL scheme. This allows an attacker to lead a user to access an arbitrary website via another application installed on the user's device.
Risk Assessment
This vulnerability may lead to unauthorized access to external websites, posing a risk of phishing or malware to users.
Recommendation
It is recommended to update the 'Skylark' App to the latest version to mitigate this authorization flaw and to monitor user access to the application.
Original NVD description (English source)
Improper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13 and earlier and 'Skylark' App for iOS 6.2.13 and earlier allows an attacker to lead a user to access an arbitrary website via another application installed on the user's device.