Mercari, Inc.
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Android App 'Mercari' (Japan version) | 1 | – | Jul 9, 2020 |
| Android App 'Mercari (Merpay) - Marketplace and Mobile Payments App' (Japan version) | 1 | – | Nov 24, 2021 |
| "Mercari" App for Android | 1 | – | Jan 26, 2024 |
Exploited and recent CVEs
- CVE-2024-23388 Improper authorization in handler for custom URL scheme issue in "Mercari" App for Android prior to version 5.78.0 allows a remote attacker to lead a user to access an arbitrary website via the vulner 0.4%
- CVE-2021-20835 Improper authorization in handler for custom URL scheme vulnerability in Android App 'Mercari (Merpay) - Marketplace and Mobile Payments App' (Japan version) versions prior to 4.49.1 allows a remote a 1.6%
- CVE-2020-5604 Android App 'Mercari' (Japan version) prior to version 3.52.0 allows arbitrary method execution of a Java object by a remote attacker via a Man-In-The-Middle attack by using Java Reflection API of Jav 2.0%