ASOS - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application ASOS published at the 'play' market has multiple vulnerabilities...

asos.com XSS vulnerability

Vulnerable URL: http://www.asos.com/Women/T-Shirts-Vests/Cat/pgecategory.aspx?cid=4718=2%22%3E%3Csvg/onload=%22confirm%28/XSSPOSED/%29 Details: Description| Value ---|--- Patched:| Yes, at 16.01.2018 Latest check for patch:| 16.01.2018 09:51 GMT Vulnerability type:| XSS Vulnerability status:|...