CVE-2021-20715: Recruit-Holdings Hot Pepper Gourmet

Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days.

Improper access control vulnerability in Hot Pepper Gourmet App for Android ver.4.111.0 and earlier, and for iOS ver.4.111.0 and earlier allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App.

Affected products

• Recruit-Holdings Hot Pepper Gourmet: up to and including 4.111.0

Published 2021-04-27. Last modified 2026-06-17.