Back to Database
Status published
Unknown
CVE-2023-28387
"NewsPicks" App for Android versions 10.4.5 and earlier and "NewsPicks"...
Vulnerability Description
"NewsPicks" App for Android versions 10.4.5 and earlier and "NewsPicks" App for iOS versions 10.4.2 and earlier use hard-coded credentials, which may allow a local attacker to analyze data in the app and to obtain API key for an external service.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-28387
Credits & Attribution
No credits recorded in the NVD database.
References
- https://play.google.com/store/apps/details?id=com.newspicks
- https://apps.apple.com/us/app/%E3%83%8B%E3%83%A5%E3%83%BC%E3%82%BA%E3%83%94%E3%83%83%E3%82%AF%E3%82%B9-%E3%83%93%E3%82%B8%E3%83%8D%E3%82%B9%E3%81%AB%E5%BD%B9%E7%AB%8B%E3%81%A4%E7%B5%8C%E6%B8%88%E3%83%8B%E3%83%A5%E3%83%BC%E3%82%B9%E3%82%A2%E3%83%97%E3%83%AA/id640956497
- https://jvn.jp/en/jp/JVN32739265/
Affected Vendor
NewsPicks, Inc.
View all reports →Affected Software
"NewsPicks" App for Android, "NewsPicks" App for iOS
Vulnerable Versions:
versions 10.4.5 and earlier, versions 10.4.2 and earlier
Timeline
Official Publish:
June 30th, 2023
Last Modified:
December 4th, 2024
Added to House:
July 22nd, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.