What is GHSA-qww3-3r2j-296c?

GHSA-qww3-3r2j-296c is a security advisory published by GitHub Security Advisories with Medium severity. "Handmade Marketplace App - Creema" provided by CREEMA LTD. contains an open redirect...

Which CVE IDs does GHSA-qww3-3r2j-296c cover?

GHSA-qww3-3r2j-296c covers the following CVE IDs: CVE-2026-72528. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-qww3-3r2j-296c?

GHSA-qww3-3r2j-296c has a CVSS v3 base score of 4.3, published by GitHub Security Advisories.

GHSA-qww3-3r2j-296cMediumCVSS 4.3

"Handmade Marketplace App - Creema" provided by CREEMA LTD. contains an open redirect...

Vendor

GitHub Security Advisories

Published

October 15, 2026

Last Modified

October 15, 2026

🔗 CVE IDs covered (1)

CVE-2026-72528 →

📋 Description

"Handmade Marketplace App - Creema" provided by CREEMA LTD. contains an open redirect vulnerability. When accessing a specially crafted URL, a website set up by the attacker may be displayed within the app's screen of a user. As a result, the user may become a victim of a phishing attack.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2026-72528
https://apps.apple.com/jp/app/id916614208
https://jvn.jp/en/jp/JVN48627289
https://play.google.com/store/apps/details?id=jp.creema.creema_android&hl=ja
https://github.com/advisories/GHSA-qww3-3r2j-296c