TI-2023-20639 CVE-2023-39507 · GHSA-96qx-whg9-w5rw
Missing authorization in Recruit Co., Ltd. "Rikunabi NEXT" App for Android
Priority LOW 27
Improper authorization in the custom URL scheme handler in "Rikunabi NEXT" App for Android prior to ver.
No Recruit Co., Ltd. vulnerabilities are listed in CISA KEV.
3 records
Improper authorization in the custom URL scheme handler in "Rikunabi NEXT" App for Android prior to ver.
Cross-site scripting (XSS) vulnerability in the RECRUIT Dokodemo Rikunabi 2013 extension before 1.0.1 for Google Chrome allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Improper access control vulnerability in Hot Pepper Gourmet App for Android ver.4.111.0 and earlier, and for iOS ver.4.111.0 and earlier allows a remote attacker to lead a user to access an arbitrary website via the vuln…