Medium severity5.5NVD Advisory· Published Jun 30, 2023· Updated Jun 17, 2026

CVE-2023-28387

Description

"NewsPicks" App for Android versions 10.4.5 and earlier and "NewsPicks" App for iOS versions 10.4.2 and earlier use hard-coded credentials, which may allow a local attacker to analyze data in the app and to obtain API key for an external service.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Uzabase/Newspicks2 versions
cpe:2.3:a:uzabase:newspicks:*:*:*:*:*:android:*:*+ 1 more
- cpe:2.3:a:uzabase:newspicks:*:*:*:*:*:android:*:*range: <=10.4.5
- cpe:2.3:a:uzabase:newspicks:*:*:*:*:*:iphone_os:*:*range: <=10.4.2
NewsPicks/NewsPicksllm-fuzzy
Range: <=10.4.5 (Android), <=10.4.2 (iOS)
Ne Inc./"newspicks" App For iOSv5
Range: versions 10.4.2 and earlier

Patches

Vulnerability mechanics

References

jvn.jp/en/jp/JVN32739265/nvdThird Party Advisory
apps.apple.com/us/app/%E3%83%8B%E3%83%A5%E3%83%BC%E3%82%BA%E3%83%94%E3%83%83%E3%82%AF%E3%82%B9-%E3%83%93%E3%82%B8%E3%83%8D%E3%82%B9%E3%81%AB%E5%BD%B9%E7%AB%8B%E3%81%A4%E7%B5%8C%E6%B8%88%E3%83%8B%E3%83%A5%E3%83%BC%E3%82%B9%E3%82%A2%E3%83%97%E3%83%AA/id640956497nvdProduct
play.google.com/store/apps/detailsnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000