Dietly Android App Hardcoded Credentials Vulnerability in BuildConfig.java
Vulnerability
A vulnerability in the Dietly Android app, specifically in version 1.25.0, involves hardcoded credentials that expose sensitive API keys in the BuildConfig.java file. This exposure could allow unauthorized access to critical data and services, increasing the risk of misuse.
Impact
The exposure of API keys in the BuildConfig.java file could lead to unauthorized access to sensitive data and services, allowing for potential misuse of those resources.
Reproduction
To reproduce this vulnerability, decompile the Dietly Android app version 1.25.0 and navigate to the BuildConfig.java file. The exposed API keys can be found in this file, indicating the presence of hardcoded credentials.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.