PT-2026-114846 · Creema · "Creema - Handmade Marketplace App" For Ios+1

CVE-2026-72528

·

Published

2026-10-15

·

Updated

2026-10-15

CVSS v3.1

4.3

Medium

VectorAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
"Handmade Marketplace App - Creema" provided by CREEMA LTD. contains an open redirect vulnerability. When accessing a specially crafted URL, a website set up by the attacker may be displayed within the app's screen of a user. As a result, the user may become a victim of a phishing attack.

Fix

Open Redirect

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2026-72528

Affected Products

"Creema - Handmade Marketplace App" For Ios
"Handmade Marketplace App - Creema" For Android