CVE-2024-23388

Name of the Vulnerable Software and Affected Versions Mercari App for Android versions prior to 5.78.0

Description The issue is related to improper authorization in the handler for a custom URL scheme, allowing a remote attacker to lead a user to access an arbitrary website via the vulnerable App, potentially resulting in a phishing attack.

Recommendations For Mercari App for Android versions prior to 5.78.0, update to version 5.78.0 or later to resolve the issue. As a temporary workaround, consider restricting the use of custom URL schemes within the App to minimize the risk of exploitation.