PT-2020-18593
CVE-2020-5623
·
Published
2020-08-28
·
Updated
2020-09-04
Description by
CVSS 3.1
6.1
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
NITORI App for Android versions 6.0.4 and earlier
NITORI App for iOS versions 6.0.2 and earlier
Description
The issue allows remote attackers to lead a user to access an arbitrary website via the vulnerable App, potentially resulting in the user becoming a victim of a phishing attack.
Recommendations
For NITORI App for Android versions 6.0.4 and earlier, update to a version later than 6.0.4 to resolve the issue.
For NITORI App for iOS versions 6.0.2 and earlier, update to a version later than 6.0.2 to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾