Approved changes feed: RSS · Atom
cpe:2.3:a:mercari:mercari:*:*:*:*:*:android:*:*part: a version: * update: *
| Vendor | Mercari (ac702e71-fcbd-5449-8fc4-4110680790db) |
|---|---|
| Product | Mercari (90bf411a-4cd0-5531-9e79-a5e53986a25c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | android |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-23388 |
vulnerable | 2026-06-08 06:29:39.732190 |
Details available
Improper authorization in handler for custom URL scheme issue in "Mercari" App for Android prior to version 5.78.0 allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a phishing attack.
Published: 2024-01-26T07:07:23.529Z
Updated: 2025-06-03T17:57:30.056Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20835 |
vulnerable | 2026-06-08 05:29:10.611935 |
Details available
Improper authorization in handler for custom URL scheme vulnerability in Android App 'Mercari (Merpay) - Marketplace and Mobile Payments App' (Japan version) versions prior to 4.49.1 allows a remote attacker to lead a user to access an arbitrary website and the website launches an arbitrary Activity of the app via the vulnerable App, which may result in Mercari account's access token being obtained.
Published: 2021-11-24T08:25:38.000Z
Updated: 2024-08-03T17:53:23.012Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5604 |
vulnerable | 2026-06-08 05:26:43.231695 |
Details available
Android App 'Mercari' (Japan version) prior to version 3.52.0 allows arbitrary method execution of a Java object by a remote attacker via a Man-In-The-Middle attack by using Java Reflection API of JavaScript code on WebView.
Published: 2020-07-09T01:05:20.000Z
Updated: 2024-08-04T08:30:24.580Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.