Retty App for Android versions prior to 4.8.13 and Retty App for iOS versions prior to 4.11.14 uses a hard-coded API key for an external service. By exploiting this vulnerability, API key for an external service may be obtained by analyzing data in the app.
[
{
"product": "Retty App",
"vendor": "Retty Inc.",
"versions": [
{
"status": "affected",
"version": "Retty App for Android versions prior to 4.8.13 and Retty App for iOS versions prior to 4.11.14"
}
]
}
]