CVE-2020-5629

UNIQLO App for Android versions 7.3.3 and earlier allows remote attackers to lead a user to access an arbitrary website via a malicious App created by the third party. As a result, if the access destination is a malicious website, the user may fall victim to the social engineering attack...

CVE-2020-5629

UNIQLO App for Android (versions 7.3.3 and earlier) contains multiple access restriction bypass vulnerabilities that can cause a user to open arbitrary URLs. Specifically, CVE-2020-5629 involves bypass via receiving an Intent from another app to navigate to an arbitrary URL, while CVE-2020-5628 (...