Yahoo! Shopping App for Android Improper Authorization Vulnerability in Custom URL Scheme Handling
Vulnerability
A vulnerability exists in the Yahoo! Shopping App for Android, specifically in versions prior to 14.15.0, due to improper authorization in the handler for custom URL schemes. This flaw allows remote, unauthenticated attackers to direct users to arbitrary websites within the app, potentially leading to phishing attacks.
Impact
Exploitation of this vulnerability could result in users being directed to phishing websites, where they may be tricked into providing personal information or credentials.
Remediation
Users are advised to update the Yahoo! Shopping App for Android to the latest version available.
Added: Sep 5, 2025, 6:20 AM
Updated: Sep 5, 2025, 6:20 AM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
0.6exploitability
6.4remediation
7.7relevance
0.5threat
0.0urgency
2.9incentive
0.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.