CVE-2023-36620

An issue was discovered in the Boomerang Parental Control application before 13.83 for Android

published November 3, 2023

CVSS
—
EPSS
1%
Percentile
44.5
In the wild
Unconfirmed
What it is

An issue was discovered in the Boomerang Parental Control application before 13.83 for Android. The app is missing the android:allowBackup="false" attribute in the manifest. This allows the user to backup the internal memory of the app to a PC. This gives the user access to the API token that is used to authenticate requests to the API.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00538 · 44.5th percentile
Published
2023-11-03T00:00Z
EPSS history
Timeline
  • 03 NOV 00:00Z
    An issue was discovered in the Boomerang Parental Control application before 13.83 for Android
    cvelistv5