PT-2022-26076 · Unknown · Lemon8 App For Android+1

Ryo Sato · CVE-2022-41797 · Published 2022-10-24 · Updated 2025-05-07

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Lemon8 App for Android versions prior to 3.3.5 Lemon8 App for iOS versions prior to 3.3.5

Description The issue is related to improper authorization in the handler for a custom URL scheme, allowing a remote attacker to lead a user to access an arbitrary website via the vulnerable App. This could result in the user becoming a victim of a phishing attack.

Recommendations For Lemon8 App for Android versions prior to 3.3.5, update to version 3.3.5 or later. For Lemon8 App for iOS versions prior to 3.3.5, update to version 3.3.5 or later.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2022-41797

Affected Products

Lemon8 App For Android

Lemon8 App For Ios

References · 7

• https://osv.dev/vulnerability/CVE-2022-41797 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-41797 · Security Note
• https://apps.apple.com/jp/app/lemon8/id1498607143 · Note
• https://t.me/cibsecurity/51985 · Telegram Post
• https://jvn.jp/en/jp/JVN10921428/index.html · Note
• https://play.google.com/store/apps/details?id=com.bd.nproject&hl=ja&gl=US · Note
• https://t.me/cvenotify/121239 · Telegram Post