CVE-2022-36539

WeDayCare B.V Ouderapp before v1.1.22 allows attackers to alter the ID value within intercepted calls to gain access to data of other parents and children...

CVE-2022-36539

WeDayCare B.V Ouderapp before v1.1.22 allows attackers to alter the ID value within intercepted calls to gain access to data of other parents and children...

CVE-2022-36539

CVE-2022-36539 affects WeDayCare B.V. Ouderapp prior to v1.1.22. The issue allows an attacker to alter the ID value in intercepted calls, enabling access to data of other parents and children. Root cause is unprotected/modifiable ID parameter in communications. Impact is data exposure of other us...