Grammarly Keyboard for Android "Authorization Code with PKCE" flow implementation vulnerability that allows account takeover

密码学缺陷 / Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) / #824931

厂商

Superhuman (formerly Grammarly)

严重程度

低危 · CVSS 6.5

赏金

—

弱点

Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

研究员

@tomtenisse

披露日期

2020-07-24

资产

com.grammarly.android.keyboard

CVE

—

该报告还没有中文解读。