Description
"Kura Sushi Official App" provided by EPG, Inc. is vulnerable to improper certificate validation. A man-in-the-middle attack may allow eavesdropping on, or altering, the communication on push notifications between the affected application and the relevant server.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| EPG | "Kura Sushi Official App" for Android | from 2.0.11 to 3.9.10 | — |
| EPG | "Kura Sushi Official App" for iOS | from 2.0.11 to 3.9.10 | — |