Vulnerability · NVD
CVE-2023-40530
CVE-2023-40530 : medium severity (CVSS 4.7). No tracked catalog app is linked to this CVE.
- Severity (CVSS)
- 4.7
- Exploitation
- 0.6 %
- Tracked apps
- 0
- Still exposed
- 0
NVD scale
EPSS, predicted over 30 days
Improper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13 and earlier and 'Skylark' App for iOS 6.2.13 and earlier allows an attacker to lead a user to access an arbitrary website via another application installed on the user's device.
Attack vector : Network
No privileges required
Show raw CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
EPSS
0.58%
exploit very unlikely
percentile 47.9%
Vulnerable CPE configurations (2)
| Vendor | Product | Platform | Versions | CPE 2.3 URI |
|---|---|---|---|---|
| skylark |
skylark Android
|
Android | ≤6.2.13 | cpe:2.3:a:skylark:skylark:*:*:*:*:*:android:*:* |
| skylark |
skylark iOS
|
iOS | ≤6.2.13 | cpe:2.3:a:skylark:skylark:*:*:*:*:*:iphone_os:*:* |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.