Guestspy
1 CVEs
product
Monthly
The backend infrastructure shared by multiple mobile device monitoring services does not adequately authenticate or authorize API requests, creating an IDOR (Insecure Direct Object Reference). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Authentication Bypass
Copy9
Exactspy
Fonetracker
Guestspy
+5
NVD
CVSS 3.1
7.5
EPSS
2.5%
EPSS 2%
CVSS 7.5
HIGH
This Week
The backend infrastructure shared by multiple mobile device monitoring services does not adequately authenticate or authorize API requests, creating an IDOR (Insecure Direct Object Reference). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Authentication Bypass
Copy9
Exactspy
+7
NVD