EPG, Inc. / "Kura Sushi Official App" for Android · EPG, Inc. / "Kura Sushi Official App" for iOS
9.1 · CVSS 4.0Critical
Description
"Kura Sushi Official App" provided by EPG, Inc. is vulnerable to improper certificate validation. A man-in-the-middle attack may allow eavesdropping on, or altering, the communication on push notifications between the affected application and the relevant server.