JVN#00414047: Studyplus App uses a hard-coded API key for an external service

Studyplus App provided by Studyplus Inc. uses a hard-coded API key for an external service (CWE-798).

Impact

API key for an external service may be obtained by analyzing data in the app.
Note that a user is not directly affected by this vulnerability.

Solution

Update the Application
Update the application to the latest version according to the information provided by the developer.

According to the developer, the API key was removed from the latest app.
The vulnerable API key has been inactivated already, therefore information contained in the vulnerable app is no longer obtained or compromised.

Products Affected

• Studyplus App for Android v6.3.7 and earlier
• Studyplus App for iOS v8.29.0 and earlier