CWE-939 - Improper Authorization in Handler for Custom URL Scheme

Description

The software uses a handler for a custom URL scheme, but it does not properly restrict which actors can invoke the handler using the scheme.






Latest vulnerabilities for CWE-939

Improper Authorization in Handler for Custom URL Scheme in Mercari App for Android 2024-01-24
Low Yes
Improper Authorization in Handler for Custom URL Scheme in e-Gov Client Application 2023-10-09
Low Yes
Multiple vulnerabilities in IBM Cloud Pak for Multicloud Management Monitoring 2023-09-01
High Yes
Improper Authorization in Handler for Custom URL Scheme in Skylark App 2023-08-25
Medium Yes
Improper Authorization in Handler for Custom URL Scheme in Rikunabi NEXT App for Android 2023-08-09
Low Yes
Multiple vulnerabilities in Mozilla Thunderbird 2023-05-10
High Yes
Multiple vulnerabilities in Mozilla Firefox and Firefox ESR 2023-05-09
High Yes
Multiple vulnerabilities in Oracle Solaris third-party software 2023-04-18
High Yes
Multiple vulnerabilities in IBM Application Performance Management 2022-11-16
High Yes
Multiple vulnerabilities in Pale Moon 2022-11-09
Medium Yes

References

Description of CWE-939 on Mitre website