Common Weakness Enumeration

    CWE Definition / CWE-939

    CWE-939: Improper Authorization in Handler for Custom URL Scheme

    The product uses a handler for a custom URL scheme, but it does not properly restrict which actors can invoke the handler using the scheme.

    Published:14 Jan 2014
    Organization:MITRE
    Modified:11 Dec 2025

    Related Weakness

    CWE-862: Missing Authorization

    CWE-940: Improper Verification of Source of a Communication Channel