CVE-2023-39507

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

Improper authorization in the custom URL scheme handler in "Rikunabi NEXT" App for Android prior to ver. 11.5.0 allows a malicious intent to lead the vulnerable App to access an arbitrary website.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-862

Affected software

No affected versions have been published.

Timeline

Published: Aug 16, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-395088.8Execution with Unnecessary Privileges, : Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundat CVE-2023-395097.2A command injection vulnerability exists in Bosch IP cameras that allows an authenticated user with administrative rights to run arbitrary c CVE-2023-395104.8Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scriptin CVE-2023-395114.8Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scriptin CVE-2023-395124.8Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scriptin CVE-2023-395135.4Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scriptin CVE-2023-395145.4Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scriptin CVE-2023-395154.8Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scriptin CVE-2023-395164.8Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scriptin CVE-2023-395175.4Joplin is a free, open source note taking and to-do application. A Cross site scripting (XSS) vulnerability in affected versions allows clic CVE-2023-395185.4social-media-skeleton is an uncompleted social media project implemented using PHP, MySQL, CSS, JavaScript, and HTML. Versions 1.0.0 until 1 CVE-2023-395194.9Cloud Explorer Lite is an open source cloud management platform. Prior to version 1.4.0, there is a risk of sensitive information leakage in