Code injection

2023-05-2901:15:00

PRIOn knowledge base

www.prio-n.com

code injection

application vulnerability

android safe mode

restriction bypass

parental control

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.1%

JSON

An issue was discovered in the Kiddoware Kids Place Parental Control application before 3.8.50 for Android. The child can remove all restrictions temporarily without the parents noticing by rebooting into Android Safe Mode and disabling the “Display over other apps” permission.

CPENameOperatorVersion
kiddowarelt3.8.50

CPE	Name	Operator	Version
	kiddoware	lt	3.8.50

References

sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilities-in-kiddoware-kids-place-parental-control-android-app/