Threats tagged 'ghsa-qpc6-vqhv-h5vv'

AdForest Classified Android App version 4.0.12 has an improper access control vulnerability in its authentication mechanism. The app uses a Base64-encoded email address as the authorization credential, which attackers can manipulate to gain unauthorized access to user accounts. This flaw can lead to account compromise and privacy breaches.