CVE-2023-23132

Name of the Vulnerable Software and Affected Versions Selfwealth iOS mobile App version 3.3.1

Description The issue concerns the disclosure of sensitive keys. Specifically, the application reveals hardcoded API keys.

Recommendations For Selfwealth iOS mobile App version 3.3.1, consider restricting access to the API endpoints that utilize the hardcoded keys until a patch is available. As a temporary workaround, avoid using the affected API endpoints that expose the sensitive information. At the moment, there is no information about a newer version that contains a fix for this vulnerability.