CVE-2024-41918: Medium severity rakuten ichiba vulnerability
'Rakuten Ichiba App' for Android 12.4.0 and earlier and 'Rakuten Ichiba App' for iOS 11.7.0 and earlier are vulnerable to improper authorization in handler for custom URL scheme. An arbitrary site may be displayed on the WebView of the product via Intent from another application installed on the user's device. As a result, the user may be redirected to an unauthorized site, and the user may become a victim of a phishing attack.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-41918?
CVE-2024-41918 has a severity rating that highlights a significant risk due to improper authorization in the Rakuten Ichiba App.
How do I fix CVE-2024-41918?
To mitigate CVE-2024-41918, update the Rakuten Ichiba App to the latest version available in the app store.
What versions are affected by CVE-2024-41918?
CVE-2024-41918 affects Rakuten Ichiba App version 12.4.0 and earlier for Android and 11.7.0 and earlier for iOS.
What kind of vulnerability is CVE-2024-41918?
CVE-2024-41918 is categorized as an improper authorization vulnerability related to custom URL scheme handling.
Can CVE-2024-41918 allow for unauthorized access to user data?
Yes, CVE-2024-41918 could potentially allow unauthorized sites to be displayed through WebView, risking user data exposure.