Recruit Co., Ltd.
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Hot Pepper Gourmet App | 1 | – | Apr 27, 2021 |
| "Rikunabi NEXT" App for Android | 1 | – | Aug 16, 2023 |
Exploited and recent CVEs
- CVE-2023-39507 Improper authorization in the custom URL scheme handler in "Rikunabi NEXT" App for Android prior to ver. 11.5.0 allows a malicious intent to lead the vulnerable App to access an arbitrary website. 0.4%
- CVE-2021-20715 Improper access control vulnerability in Hot Pepper Gourmet App for Android ver.4.111.0 and earlier, and for iOS ver.4.111.0 and earlier allows a remote attacker to lead a user to access an arbitrary 0.9%