Improper authorization in handler for custom URL scheme vulnerability in...

0 CVSS

Vulnerability Description

Improper authorization in handler for custom URL scheme vulnerability in Lemon8 App for Android versions prior to 3.3.5 and Lemon8 App for iOS versions prior to 3.3.5 allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a phishing attack.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-41797

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

Affected Vendor

ByteDance K.K.

View all reports →

Affected Software

Lemon8 App for Android and Lemon8 App for iOS

Vulnerable Versions:

Lemon8 App for Android versions prior to 3.3.5 and Lemon8 App for iOS versions prior to 3.3.5

Timeline

Official Publish: October 24th, 2022

Last Modified: May 7th, 2025

Added to House: July 21st, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.