What is GHSA-wpq3-9fhm-ph6x?

GHSA-wpq3-9fhm-ph6x is a security advisory published by GitHub Security Advisories with Medium severity. The Android application "YAMAP -Social Trekking GPS App" contains an improper access control...

Which CVE IDs does GHSA-wpq3-9fhm-ph6x cover?

GHSA-wpq3-9fhm-ph6x covers the following CVE IDs: CVE-2026-85125. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-wpq3-9fhm-ph6x?

GHSA-wpq3-9fhm-ph6x has a CVSS v3 base score of 5.4, published by GitHub Security Advisories.

GHSA-wpq3-9fhm-ph6xMediumCVSS 5.4

The Android application "YAMAP -Social Trekking GPS App" contains an improper access control...

Vendor

GitHub Security Advisories

Published

September 14, 2026

Last Modified

September 14, 2026

🔗 CVE IDs covered (1)

CVE-2026-85125 →

📋 Description

The Android application "YAMAP -Social Trekking GPS App" contains an improper access control vulnerability in its WebView implementation. The in-app browser may cause information leakage from the app or redirect users to unintended websites.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2026-85125
https://info.yamap.com/archives/8173
https://jvn.jp/en/jp/JVN69877538
https://play.google.com/store/apps/details?id=jp.co.yamap&hl=en
https://github.com/advisories/GHSA-wpq3-9fhm-ph6x