VulnerabilityModified
CVE-2019-8791
Processing a maliciously crafted URL may lead to an open redirect.
MEDIUM 6.1EPSS 1.12%
Does this matter?
Lower severity and a low EPSS score (1.12%). Track it; it rarely justifies an emergency change on its own.
Description
An issue existed in the parsing of URL schemes. This issue was addressed with improved URL validation. This issue is fixed in Shazam Android App Version 9.25.0, Shazam iOS App Version 12.11.0. Processing a maliciously crafted URL may lead to an open redirect.
- CVSS 3.1
- 6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- EPSS
- 1.12% probability · 64th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-601
- Affected
- apple/shazam
- Source
- product-security@apple.com
References
- https://support.apple.com/HT210744Vendor Advisory
- https://support.apple.com/HT210745Vendor Advisory
- https://support.apple.com/HT210744Vendor Advisory
- https://support.apple.com/HT210745Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.