Vulnerability Details CVE-2020-5667
Studyplus App for Android v6.3.7 and earlier and Studyplus App for iOS v8.29.0 and earlier use a hard-coded API key for an external service. By exploiting this vulnerability, API key for an external service may be obtained by analyzing data in the app.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 16.2%
CVSS Severity
CVSS v3 Score 5.5
CVSS v2 Score 2.1
Products affected by CVE-2020-5667
-
cpe:2.3:a:wantedlyinc:studyplus:-
-
cpe:2.3:a:wantedlyinc:studyplus:6.3.7
-
cpe:2.3:a:wantedlyinc:studyplus:8.29.0