CVE-2020-5623 Open redirect in NITORI App for Android and NITORI App for iOS
Attackers can redirect users to malicious websites via the NITORI mobile app, facilitating phishing attacks.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2020-5623?
CVE-2020-5623 is a medium-severity vulnerability in NITORI App for Android and NITORI App for iOS, published on 28 Aug 2020. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
NITORI App for Android versions 6.0.4 and earlier and NITORI App for iOS versions 6.0.2 and earlier allow remote attackers to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a phishing attack.
Weakness: CWE-601
Which versions are affected by CVE-2020-5623?
It affects 1 product.
Products include Nitori Nitori.
How do I fix CVE-2020-5623?
No fix has been published for CVE-2020-5623 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-5623 being exploited?
There is no known exploitation of CVE-2020-5623 in the wild and no public exploit code.
Sources
Also known as GHSA-cxc9-fxh2-6rqj.