What’s Vulnerable › Vulnerabilities

CVE-2021-20728

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-06-09 · updated 2026-06-17

Description

Improper access control vulnerability in goo blog App for Android ver.1.2.25 and earlier and for iOS ver.1.3.3 and earlier allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App.

Affected products

• NTT Resonant Incorporated goo blog App: through 1.2.25; through 1.3.3

References

• https://blog.goo.ne.jp/staffblog/e/d84a6b220222462094728301782885db
• https://jvn.jp/en/jp/JVN91691168/index.html
• https://blog.goo.ne.jp/staffblog/e/d84a6b220222462094728301782885db
• https://jvn.jp/en/jp/JVN91691168/index.html

Get alerted when CVE-2021-20728 or the next vulnerability affects your stack