Medium severity6.1NVD Advisory· Published Oct 13, 2021· Updated Jun 17, 2026

CVE-2021-20834

Description

Improper authorization in handler for custom URL scheme vulnerability in Nike App for Android versions prior to 2.177 and Nike App for iOS versions prior to 2.177.1 allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Nike/Nike2 versions
cpe:2.3:a:nike:nike:*:*:*:*:*:android:*:*+ 1 more
- cpe:2.3:a:nike:nike:*:*:*:*:*:android:*:*range: <2.177.3.3688
- cpe:2.3:a:nike:nike:*:*:*:*:*:iphone_os:*:*range: <2.177.1
Nike/Nike Appllm-fuzzy
Range: <2.177
Nike/Nike App For Android Versions Prior To 2.177 And Nike App For iOS Versions Prior To 2.177.1v5
Range: Nike App for Android versions prior to 2.177 and Nike App for iOS versions prior to 2.177.1

Patches

Vulnerability mechanics

References

jvn.jp/en/jp/JVN89126639/index.htmlnvdThird Party Advisory
apps.apple.com/app/nike/id1095459556nvdProductRelease Notes
play.google.com/store/apps/detailsnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000