Android App 'Mercari (Merpay) Marketplace And Mobile Payments App' (Japan Version)
Approved changes feed: RSS · Atom
cpe:2.3:a:mercari,_inc.:android_app_'mercari_(merpay)_-_marketplace_and_mobile_payments_app'_(japan_version):*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Mercari, Inc. (0b0e8b4b-2892-5b12-a9c0-9584e4505ea7) |
|---|---|
| Product | Android App 'Mercari (Merpay) Marketplace And Mobile Payments App' (Japan Version) (96bda575-c03d-5650-91e1-18d2a69d9a99) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-20835 |
vulnerable | 2026-06-08 05:29:10.611365 |
Details available
Improper authorization in handler for custom URL scheme vulnerability in Android App 'Mercari (Merpay) - Marketplace and Mobile Payments App' (Japan version) versions prior to 4.49.1 allows a remote attacker to lead a user to access an arbitrary website and the website launches an arbitrary Activity of the app via the vulnerable App, which may result in Mercari account's access token being obtained.
Published: 2021-11-24T08:25:38.000Z
Updated: 2024-08-03T17:53:23.012Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.