CVE-2021-20873
High
Description
Yappli is an application development platform which provides the function to access a requested URL using Custom URL Scheme. When Android apps are developed with Yappli versions since v7.3.6 and prior to v9.30.0, they are vulnerable to improper authorization in Custom URL Scheme handler, and may be directed to unintended sites via a specially crafted URL.
SeverityHigh
CVSS8.1
Exploit probability—
ProductYappli
PublishedDec 28, 2021
First seenDec 28, 2021
How to fix
Update
- yappli yappli9.30.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| yappli yappli | 7.3.6 ≤ v < 9.30.0 | 9.30.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.