CVE-2023-22429: Wolt Delivery

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Android App 'Wolt Delivery: Food and more' version 4.27.2 and earlier uses hard-coded credentials (API key for an external service), which may allow a local attacker to obtain the hard-coded API key via reverse-engineering the application binary.

Affected products

• Wolt Wolt Delivery: before 4.28.0 (fixed in 4.28.0)

Published 2023-04-11. Last modified 2026-06-17.