PT-2021-14185 · Unknown · Goo Blog App

Published 2021-06-09 · Updated 2021-06-15 · CVE-2021-20728

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions: goo blog App for Android versions 1.2.25 and earlier goo blog App for iOS versions 1.3.3 and earlier

Description: The issue is related to improper access control, allowing a remote attacker to trick a user into accessing an arbitrary website through the vulnerable App.

Recommendations: For Android versions 1.2.25 and earlier, update to a version later than 1.2.25 to resolve the issue. For iOS versions 1.3.3 and earlier, update to a version later than 1.3.3 to resolve the issue.

Fix

Related Identifiers

CVE-2021-20728

Affected Products

Goo Blog App

References · 4

• https://osv.dev/vulnerability/CVE-2021-20728 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-20728 · Security Note
• https://blog.goo.ne.jp/staffblog/e/d84a6b220222462094728301782885db · Vendor Advisory
• https://jvn.jp/en/jp/JVN91691168/index.html · Note