CVE-2021-20873

HIGH 8.1CVE-2021-20873 · Published 28/12/2021 · updated 17/06/2026

In short

CVE-2021-20873 is a HIGH (CVSS 8.1) vulnerability affecting yappli (yappli).
Chance of exploitation in the next 30 days (EPSS): 0.87%, higher than 59.1% of all vulnerabilities.
Fix: update to 9.30.0 or later.

Package	Affected versions	Patched versions
yappli yappli	`≥ 7.3.6, < 9.30.0`	`9.30.0`

Description

Yappli is an application development platform which provides the function to access a requested URL using Custom URL Scheme. When Android apps are developed with Yappli versions since v7.3.6 and prior to v9.30.0, they are vulnerable to improper authorization in Custom URL Scheme handler, and may be directed to unintended sites via a specially crafted URL.

References

jvn.jp/en/jp/JVN66422035/index.html · Third Party Advisory
support.yappli.co.jp/hc/ja/articles/4410249902745 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free