CVE-2023-28387

—

CVSS 3.1

5.5 medium

EPSS

<1%p7

Published

Jun 30, 2023 (Jun 30, 2023)

Modified

Jun 17, 2026

Description

"NewsPicks" App for Android versions 10.4.5 and earlier and "NewsPicks" App for iOS versions 10.4.2 and earlier use hard-coded credentials, which may allow a local attacker to analyze data in the app and to obtain API key for an external service.

Vendors: uzabase
Products: newspicks
Weakness: CWE-798
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.