{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-10-01T05:18:40.217","vulnerabilities":[{"cve":{"id":"CVE-2024-54014","sourceIdentifier":"vultures@jpcert.or.jp","published":"2024-12-05T03:15:14.530","lastModified":"2026-06-17T08:09:40.307","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Improper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13 and earlier and 'Skylark' App for iOS 6.2.13 and earlier allows an attacker to lead the application to access an arbitrary web site via another application installed on the user's device."},{"lang":"es","value":"La autorización incorrecta en el controlador para el problema del esquema de URL personalizado en la aplicación 'Skylark' para Android 6.2.13 y versiones anteriores y la aplicación 'Skylark' para iOS 6.2.13 y versiones anteriores permite que un atacante haga que la aplicación acceda a un sitio web arbitrario a través de otra aplicación instalada en el dispositivo del usuario."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"SKYLARK HOLDINGS CO., LTD.","product":"'Skylark' App for Android","versions":[{"version":"6.2.13 and earlier","status":"affected"}]},{"vendor":"SKYLARK HOLDINGS CO., LTD.","product":"'Skylark' App for iOS","versions":[{"version":"6.2.13 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"vultures@jpcert.or.jp","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","baseScore":3.6,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-12-05T11:33:12.969638Z","id":"CVE-2024-54014","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"vultures@jpcert.or.jp","type":"Secondary","description":[{"lang":"en","value":"CWE-939"}]}],"references":[{"url":"https://apps.apple.com/jp/app/%E3%81%99%E3%81%8B%E3%81%84%E3%82%89%E3%83%BC%E3%81%8F%E3%82%A2%E3%83%97%E3%83%AA/id906930478","source":"vultures@jpcert.or.jp"},{"url":"https://jvn.jp/en/jp/JVN03447226/","source":"vultures@jpcert.or.jp"},{"url":"https://play.google.com/store/apps/details?id=jp.co.skylark.app.gusto","source":"vultures@jpcert.or.jp"}]}}]}