Skip to content
OpenAdvisories
Unscored CVE-2022-0131 EUVD-2022-15344GHSA-r9rx-885h-88c4

Jimoty App for Android versions prior to 3.7.42 uses a hard-coded API key for an external service. By exploiting this vulnerability, API ke…

Published Jan 17, 2022 · Updated Aug 2, 2024 · Assigned by jpcert

Vendor: Jimoty Product: Jimoty App for Android Platform: Android

Description

Jimoty App for Android versions prior to 3.7.42 uses a hard-coded API key for an external service. By exploiting this vulnerability, API key for an external service may be obtained by analyzing data in the app.

Affected products

VendorProductAffectedFixed
Jimoty Jimoty App for Android versions prior to 3.7.42 —

References