CVE-2021-20748

Retty App for Android versions prior to 4.8.13 and Retty App for iOS versions prior to 4.11.14 uses a hard-coded API key for an external service

published July 14, 2021

CVSS
—
EPSS
1%
Percentile
63.6
In the wild
Unconfirmed
What it is

Retty App for Android versions prior to 4.8.13 and Retty App for iOS versions prior to 4.11.14 uses a hard-coded API key for an external service. By exploiting this vulnerability, API key for an external service may be obtained by analyzing data in the app.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01037 · 63.6th percentile
Published
2021-07-14T01:20Z
EPSS history
Timeline
  • 14 JUL 01:20Z
    Retty App for Android versions prior to 4.8.13 and Retty App for iOS versions prior to 4.11.14 uses a hard-coded API key for an external service
    cvelistv5