{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-07-01T16:22:04.167","vulnerabilities":[{"cve":{"id":"CVE-2020-5667","sourceIdentifier":"vultures@jpcert.or.jp","published":"2020-11-06T03:15:17.777","lastModified":"2026-06-17T03:22:03.980","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Studyplus App for Android v6.3.7 and earlier and Studyplus App for iOS v8.29.0 and earlier use a hard-coded API key for an external service. By exploiting this vulnerability, API key for an external service may be obtained by analyzing data in the app."},{"lang":"es","value":"La aplicación Studyplus para Android versiones v6.3.7 y anteriores y la aplicación Studyplus para iOS versiones v8.29.0 y anteriores, usan una clave API embebida para un servicio externo. Al explotar esta vulnerabilidad, la clave API para un servicio externo puede ser obtenida mediante el análisis de los datos en la aplicación"}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"Studyplus Inc.","product":"Studyplus App","versions":[{"version":"for Android v6.3.7 and earlier, and for iOS v8.29.0 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-798"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wantedlyinc:studyplus:*:*:*:*:*:android:*:*","versionEndIncluding":"6.3.7","matchCriteriaId":"1F8A4885-F83A-4364-8ADF-96E1109C215B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wantedlyinc:studyplus:*:*:*:*:*:iphone_os:*:*","versionEndIncluding":"8.29.0","matchCriteriaId":"A4BC2E3B-846A-4F4A-A56D-8AD085B3D84E"}]}]}],"references":[{"url":"https://jvn.jp/en/jp/JVN00414047/index.html","source":"vultures@jpcert.or.jp","tags":["Third Party Advisory"]},{"url":"https://jvn.jp/en/jp/JVN00414047/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}}]}