Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-x23q-q7f7-q46q

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Studyplus App for Android v6.3.7 and earlier and Studyplus App for iOS v8.29.0 and earlier use a hard-coded API key for an external service. By exploiting this vulnerability, API key for an external service may be obtained by analyzing data in the app.

Studyplus App for Android v6.3.7 and earlier and Studyplus App for iOS v8.29.0 and earlier use a hard-coded API key for an external service. By exploiting this vulnerability, API key for an external service may be obtained by analyzing data in the app.

EPSS

Процентиль: 16%
0.00052
Низкий

Дефекты

CWE-798

Связанные уязвимости

CVSS3: 5.5
nvd
больше 5 лет назад

Studyplus App for Android v6.3.7 and earlier and Studyplus App for iOS v8.29.0 and earlier use a hard-coded API key for an external service. By exploiting this vulnerability, API key for an external service may be obtained by analyzing data in the app.

EPSS

Процентиль: 16%
0.00052
Низкий

Дефекты

CWE-798