low3.3
CVE-2022-0131
Jimoty App for Android versions prior to 3.7.42 uses a hard-coded API key for an external service.
Impact
Jimoty App for Android versions prior to 3.7.42 uses a hard-coded API key for an external service. By exploiting this vulnerability, API key for an external service may be obtained by analyzing data in the app.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jmty | Jimoty | before 3.7.42 |