Threats tagged 'ghsa-68mx-c8hg-wjhw'

Attendo (formerly Petpooja Payroll) Admin Android application versions 3.0.13 and earlier contain hard-coded credentials in the app's Flutter configuration files. These credentials allow attackers to authenticate to the production MQTT broker and access sensitive employee data and device telemetry. The vulnerability enables unauthorized reading and message injection on MQTT topics.