PT-2021-14232

CVE-2021-20777

·

Published

2021-07-07

·

Updated

2022-05-03

Description by

CVSS 2.0
4.3
Medium
MetricsAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions: GU App for Android versions 4.8.0 through 5.0.2
Description: The issue is related to improper authorization in the handler for a custom URL scheme, allowing a remote attacker to lead a user to access an arbitrary website via the vulnerable App.
Recommendations: For GU App for Android versions 4.8.0 through 5.0.2, update to a version outside of this range to resolve the issue.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-862: Missing Authorization
Related identifiers
CVE-2021-20777
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com