CVE-2023-39507 (published 2023-08-16T08:47:29.304Z)
Improper authorization in the custom URL scheme handler in "Rikunabi NEXT" App for Android prior to ver. 11.5.0 allows a malicious intent to lead the vulnerable App to access an arbitrary website.
Affected products: Vendor: Recruit Co., Ltd.
Product: "Rikunabi NEXT" App for Android
Versions: prior to ver. 11.5.0