Code injection

Selfwealth iOS mobile App 3.3.1 is vulnerable to Insecure App Transport Security ATS Settings...

CVE-2023-23132: Use of Hard-coded Credentials

Selfwealth iOS mobile App 3.3.1 is vulnerable to Sensitive key disclosure. The application reveals hardcoded API keys...

PT-2023-18852

Name of the Vulnerable Software and Affected Versions Selfwealth iOS mobile App version 3.3.1 Description The issue concerns the disclosure of sensitive keys. Specifically, the application reveals hardcoded API keys. Recommendations For Selfwealth iOS mobile App version 3.3.1, consider restrictin...

CVE-2023-23131: Improper Certificate Validation

Selfwealth iOS mobile App 3.3.1 is vulnerable to Insecure App Transport Security ATS Settings...