Lucene search
MitreCVELIST:CVE-2023-36620HistoryNov 03, 2023 - 12:00 a.m.
CVE-2023-36620
2023-11-0300:00:00
mitre
www.cve.org
1
boomerang parental control
android
allowbackup
api token
An issue was discovered in the Boomerang Parental Control application before 13.83 for Android. The app is missing the android:allowBackup=“false” attribute in the manifest. This allows the user to backup the internal memory of the app to a PC. This gives the user access to the API token that is used to authenticate requests to the API.
Related
cve
cve
CVE-2023-36620
2023-11-03 04:15:21
prion
prion
Design/Logic Flaw
2023-11-03 04:15:00
vulnrichment
vulnrichment
CVE-2023-36620
2023-11-03 00:00:00
nvd
nvd
CVE-2023-36620
2023-11-03 04:15:21
packetstorm
packetstorm
Boomerang Parental Control App Cross Site Scripting / Privilege Escalation
2023-07-11 00:00:00