Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

1 record

Vendor: istyle Inc. Component: @cosme Clear all filters
TI-2024-30297 CVE-2024-45203 · GHSA-499r-h8wp-rfvm

Improper authorization in handler for custom URL scheme issue in "@cosme" App for Android…

Priority LOW 20

Improper authorization in handler for custom URL scheme issue in "@cosme" App for Android versions prior 5.69.0 and "@cosme" App for iOS versions prior to 6.74.0 allows an attacker to lead a user to access an arbitrary w…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00293 Published 2024-09-09 Fixed in 5.69.0, 6.74.0 CWE-939