CVE-2020-5604

2020-07-0901:05:20

jpcert

www.cve.org

0.003 Low

EPSS

Percentile

71.1%

JSON

Android App ‘Mercari’ (Japan version) prior to version 3.52.0 allows arbitrary method execution of a Java object by a remote attacker via a Man-In-The-Middle attack by using Java Reflection API of JavaScript code on WebView.

CNA Affected

[
  {
    "product": "Android App 'Mercari' (Japan version)",
    "vendor": "Mercari, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "prior to version 3.52.0"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN93167107/index.html

0.003 Low

EPSS

Percentile

71.1%

JSON

Related for CVELIST:CVE-2020-5604