CVE-2023-36620

UNKNOWN 0.0

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

An issue was discovered in the Boomerang Parental Control application before 13.83 for Android. The app is missing the android:allowBackup="false" attribute in the manifest. This allows the user to backup the internal memory of the app to a PC. This gives the user access to the API token that is used to authenticate requests to the API.

Vendor	n/a
Product	n/a
Published	Nov 3, 2023
Last Updated	Sep 5, 2024

Stay Ahead of the Next One

Get instant alerts for n/a n/a

Be the first to know when new unknown vulnerabilities affecting n/a n/a are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

n/a / n/a

n/a

References

NVD ↗ CVE.org ↗ EPSS Data ↗

sec-consult.com: https://sec-consult.com/blog/detail/the-hidden-costs-of-parental-control-apps/ useboomerang.com: https://useboomerang.com/ seclists.org: https://seclists.org/fulldisclosure/2023/Jul/12