'Rakuten Ichiba App' for Android 12.4.0 and earlier and 'Rakuten...

0 CVSS

Vulnerability Description

'Rakuten Ichiba App' for Android 12.4.0 and earlier and 'Rakuten Ichiba App' for iOS 11.7.0 and earlier are vulnerable to improper authorization in handler for custom URL scheme. An arbitrary site may be displayed on the WebView of the product via Intent from another application installed on the user's device. As a result, the user may be redirected to an unauthorized site, and the user may become a victim of a phishing attack.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-41918

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

Affected Vendor

Rakuten Group, Inc.

View all reports →

Affected Software

'Rakuten Ichiba App' for Android, 'Rakuten Ichiba App' for iOS

Vulnerable Versions:

12.4.0 and earlier, 11.7.0 and earlier

Timeline

Official Publish: August 29th, 2024

Last Modified: August 29th, 2024

Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.