Filtered by vendor Timelybills Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2021-26833 1 Timelybills 1 Timelybills 2024-11-21 5.9 Medium
Cleartext Storage in a File or on Disk in TimelyBills <= 1.7.0 for iOS and versions <= 1.21.115 for Android allows attacker who can locally read user's files obtain JWT tokens for user's account due to insufficient cache clearing mechanisms. A threat actor can obtain sensitive user data by decoding the tokens as JWT is signed and encoded, not encrypted.