Medium severity6.1NVD Advisory· Published Jan 26, 2024· Updated Jun 17, 2026
CVE-2024-23388
CVE-2024-23388
Description
Improper authorization in handler for custom URL scheme issue in "Mercari" App for Android prior to version 5.78.0 allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a phishing attack.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Range: prior to version 5.78.0
cpe:2.3:a:mercari:mercari:*:*:*:*:*:android:*:*+ 1 more
- cpe:2.3:a:mercari:mercari:*:*:*:*:*:android:*:*range: <5.78.0
- (no CPE)range: <5.78.0
Patches
Vulnerability mechanics
References
1- jvn.jp/en/jp/JVN70818619/nvdThird Party Advisory
News mentions
0No linked articles in our index yet.