Mercari, Inc. Android App 'Mercari' (Japan version)

• CVE-2020-5604 Unrated Android App 'Mercari' (Japan version) prior to version 3.52.0 allows arbitrary method execution of a Java object by a remote attacker via a Man-In-The-Middle attack by using Java Reflection API of Jav 2.0%