CVE-2024-54014
Improper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13...
Improper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13 and earlier and 'Skylark' App for iOS 6.2.13 and earlier allows an attacker to lead the application to access an arbitrary web site via another application installed on the user's device.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- Low
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
Improper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13 and earlier and 'Skylark' App for iOS 6.2.13 and earlier allows an attacker to lead the application to access an arbitrary web site via another application installed on the user's device.
- Record
CVE-2024-54014- CVSS 3.0
- 3.6 Low
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N - Weakness
- CWE-939
- Updated
- 2026-11-02
EUVDEUVD-2024-52242
Improper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13 and earlier and 'Skylark' App for iOS 6.2.13 and earlier allows an attacker to lead the application to access an arbitrary web site via another application installed on the user's device.
- Record
EUVD-2024-52242- CVSS 3.0
- 3.6 Low
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mqq8-fjx9-9qg8
Improper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13...
Improper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13 and earlier and 'Skylark' App for iOS 6.2.13 and earlier allows an attacker to lead the application to access an arbitrary web site via another application installed on the user's device.
- Record
GHSA-mqq8-fjx9-9qg8- CVSS 3.0
- 3.6 Low
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N - Weakness
- CWE-939
- Updated
- 2026-11-02
NVD
Improper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13 and earlier and 'Skylark' App for iOS 6.2.13 and earlier allows an attacker to lead the application to access an arbitrary web site via another application installed on the user's device.
- Record
CVE-2024-54014- CVSS 3.0
- 3.6 Low
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N - Weakness
- CWE-939
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-54014 is a low vulnerability (CVSS 3.6) in Skylark Holdings Co., Ltd. 'skylark' App For Android, published December 5, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.21%, the 10th percentile. No source names a fixed version.