‘Hulu / フールー’ App for Android from version 3.0.47 to the version prior to 3.1.2 uses a hard-coded API key for an external service. By exploiting this vulnerability, API key for an external service may be obtained by analyzing data in the app.
[
{
"product": "'Hulu / フールー' App for Android",
"vendor": "HJ Holdings, Inc.",
"versions": [
{
"status": "affected",
"version": "from version 3.0.47 to the version prior to 3.1.2"
}
]
}
]