Skip to content
OpenAdvisories
Unscored CVE-2020-5628 EUVD-2020-26789GHSA-3pm8-h8w8-chv6

UNIQLO App for Android versions 7.3.3 and earlier allows remote attackers to lead a user to access an arbitrary website via the vulnerable …

Published Sep 18, 2020 · Updated Aug 4, 2024 · Assigned by jpcert

Description

UNIQLO App for Android versions 7.3.3 and earlier allows remote attackers to lead a user to access an arbitrary website via the vulnerable App. As a result, if the access destination is a malicious website, the user may fall victim to the social engineering attack.

Affected products

VendorProductAffectedFixed
UNIQLO UNIQLO App for Android versions 7.3.3 and earlier —

References