{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-05-10T08:07:54.006","vulnerabilities":[{"cve":{"id":"CVE-2023-28387","sourceIdentifier":"vultures@jpcert.or.jp","published":"2023-06-30T07:15:08.720","lastModified":"2024-11-21T07:54:58.317","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"\"NewsPicks\" App for Android versions 10.4.5 and earlier and \"NewsPicks\" App for iOS versions 10.4.2 and earlier use hard-coded credentials, which may allow a local attacker to analyze data in the app and to obtain API key for an external service."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-798"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:uzabase:newspicks:*:*:*:*:*:iphone_os:*:*","versionEndIncluding":"10.4.2","matchCriteriaId":"8C92C0A8-F610-4037-904A-72A0EF590B6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:uzabase:newspicks:*:*:*:*:*:android:*:*","versionEndIncluding":"10.4.5","matchCriteriaId":"3570C41E-46D1-47B4-AC43-A94BD24D4596"}]}]}],"references":[{"url":"https://apps.apple.com/us/app/%E3%83%8B%E3%83%A5%E3%83%BC%E3%82%BA%E3%83%94%E3%83%83%E3%82%AF%E3%82%B9-%E3%83%93%E3%82%B8%E3%83%8D%E3%82%B9%E3%81%AB%E5%BD%B9%E7%AB%8B%E3%81%A4%E7%B5%8C%E6%B8%88%E3%83%8B%E3%83%A5%E3%83%BC%E3%82%B9%E3%82%A2%E3%83%97%E3%83%AA/id640956497","source":"vultures@jpcert.or.jp","tags":["Product"]},{"url":"https://jvn.jp/en/jp/JVN32739265/","source":"vultures@jpcert.or.jp","tags":["Third Party Advisory"]},{"url":"https://play.google.com/store/apps/details?id=com.newspicks","source":"vultures@jpcert.or.jp","tags":["Product"]},{"url":"https://apps.apple.com/us/app/%E3%83%8B%E3%83%A5%E3%83%BC%E3%82%BA%E3%83%94%E3%83%83%E3%82%AF%E3%82%B9-%E3%83%93%E3%82%B8%E3%83%8D%E3%82%B9%E3%81%AB%E5%BD%B9%E7%AB%8B%E3%81%A4%E7%B5%8C%E6%B8%88%E3%83%8B%E3%83%A5%E3%83%BC%E3%82%B9%E3%82%A2%E3%83%97%E3%83%AA/id640956497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]},{"url":"https://jvn.jp/en/jp/JVN32739265/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://play.google.com/store/apps/details?id=com.newspicks","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]}]}}]}