CVE-2021-20728

—

CVSS 3.1

5.3 medium

EPSS

<1%p61

Published

Jun 9, 2021 (Jun 9, 2021)

Modified

Jun 17, 2026

Description

Improper access control vulnerability in goo blog App for Android ver.1.2.25 and earlier and for iOS ver.1.3.3 and earlier allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App.

Vendors: nttr
Products: goo blog
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.