CVE-2021-20834
Medium
Description
Improper authorization in handler for custom URL scheme vulnerability in Nike App for Android versions prior to 2.177 and Nike App for iOS versions prior to 2.177.1 allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App.
SeverityMedium
CVSS6.1
Exploit probability—
ProductNike
PublishedOct 13, 2021
First seenOct 13, 2021
How to fix
Update
- nike nike2.177.1, 2.177.3.3688 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nike nike | v < 2.177.1, v < 2.177.3.3688 | 2.177.1, 2.177.3.3688 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.