What’s Vulnerable › Vulnerabilities

CVE-2024-54014

• Severity: low (CVSS 3.6 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-12-05 · updated 2026-06-17
• Weakness: CWE-939

Description

Improper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13 and earlier and 'Skylark' App for iOS 6.2.13 and earlier allows an attacker to lead the application to access an arbitrary web site via another application installed on the user's device.

Affected products

• SKYLARK HOLDINGS CO., LTD. 'Skylark' App for Android: through 6.2.13
• SKYLARK HOLDINGS CO., LTD. 'Skylark' App for iOS: through 6.2.13

References

• https://apps.apple.com/jp/app/%E3%81%99%E3%81%8B%E3%81%84%E3%82%89%E3%83%BC%E3%81%8F%E3%82%A2%E3%83%97%E3%83%AA/id906930478
• https://jvn.jp/en/jp/JVN03447226/
• https://play.google.com/store/apps/details?id=jp.co.skylark.app.gusto

Get alerted when CVE-2024-54014 or the next vulnerability affects your stack