CVE-2023-28387
Assigner: jpcert
Published: 2023-06-30T06:22:37.864Z
State: PUBLISHED
affected: vendor: NewsPicks, Inc.
product: "NewsPicks" App for Android
versions: version: versions 10.4.5 and earlier
status: affected
vendor: NewsPicks, Inc.
product: "NewsPicks" App for iOS
versions: version: versions 10.4.2 and earlier
status: affected
descriptions: value: "NewsPicks" App for Android versions 10.4.5 and earlier and "NewsPicks" App for iOS versions 10.4.2 and earlier use hard-coded credentials, which may allow a local attacker to analyze data in the app and to obtain API key for an external service.
problemTypes: descriptions: description: Use of Hard-coded Credentials
type: text