Approved changes feed: RSS · Atom

cpe:2.3:a:ly_corporation:"yahoo!_shopping"_app_for_android:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLy Corporation (34e85f02-866b-5d89-b7f9-2d90cbcfd761)
Product"Yahoo! Shopping" App For Android (13705b0c-3784-5ffb-bebc-89c4d5b90729)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-41408 vulnerable 2026-06-08 07:25:06.998799 Details available
MEDIUM (4.3)
Improper authorization in handler for custom URL scheme issue in "Yahoo! Shopping" App for Android versions prior to 14.15.0 allows a remote unauthenticated attacker may lead a user to access an arbitrary website on the vulnerable App. As a result, the user may become a victim of a phishing attack.
Published: 2025-09-05T05:25:15.422Z
Updated: 2025-09-05T13:45:13.400Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.