CVE-2024-23453

Name of the Vulnerable Software and Affected Versions Android Spoon application versions 7.11.1 through 8.6.0

Description The issue concerns the use of hard-coded credentials in the application, which could allow a local attacker to retrieve a hard-coded API key by reverse-engineering the application binary. This API key could then be used for unauthorized access to the associated service.

Recommendations For Android Spoon application versions 7.11.1 through 8.6.0, consider removing or securely storing the hard-coded API key to prevent unauthorized access until a patch is available. As a temporary workaround, restrict access to the application's binary to minimize the risk of reverse-engineering.