writeups.xyz / Write Up – Finapi (Open Banking API) Oauth Credentials Exposed In Plain Text In Android App

Submitter : c2a

Date: 1 April 2022

Bounty : undisclosed

Vulnerabilities :

• Hardcoded Credentials
• Android

Programs :

• Undisclosed

Authors :

• Omar Espino (@Omespino)

Link :
https://omespino.com/write-up-finapi-open-banking-api-oauth-credentials-exposed-in-plain-text-in-android-app/