CVE-2021-20747

—

CVSS 3.1

4.3 medium

EPSS

1%p61

Published

Jul 14, 2021 (Jul 14, 2021)

Modified

Jun 17, 2026

Description

Improper authorization in handler for custom URL scheme vulnerability in Retty App for Android versions prior to 4.8.13 and Retty App for iOS versions prior to 4.11.14 allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App.

Vendors: retty
Products: retty
Weakness: CWE-862
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.