CVE-2024-54014

Name of the Vulnerable Software and Affected Versions: Skylark App for Android versions 6.2.13 and earlier Skylark App for iOS versions 6.2.13 and earlier

Description: The issue is related to improper authorization in the handler for a custom URL scheme, allowing an attacker to lead the application to access an arbitrary web site via another application installed on the user's device.

Recommendations: For Skylark App for Android versions 6.2.13 and earlier, consider restricting access to custom URL schemes until a patch is available. For Skylark App for iOS versions 6.2.13 and earlier, consider restricting access to custom URL schemes until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.