OnePlus Phone Critical Security Vulnerability in Default Wallpapers app Leaks Users Email Address

guest · Jun 19, 2019

OnePlus Phone Critical Security Vulnerability in Default Wallpapers app Leaks Users Email Address
June 19, 2019
https://gbhackers.com/shot-on-oneplus-leaks-email-address/

A critical security flaw with OnePlus device wallpaper app Shot on OnePlus leaks hundreds of user’s email address. The flaw resides in the API that used to host the photos.
The Shot on OnePlus is an application used to access photos uploaded by OnePlus users, allowing them to set wallpaper and to upload photos from the app or through the website.

9to5Google reported the bug in the API that facilitates the connectivity between the server and the OnePlus app. The API hosted on open.oneplus.net is insecure and can be accessed by anyone who has the access token.
The API is mainly used to get public photos, but the response obtained through API used by onePlus exposes sensitive data that should not be accessed publically.
Click to expand...

Log in or Sign up

OnePlus Phone Critical Security Vulnerability in Default Wallpapers app Leaks Users Email Address

guest Guest

Log in or Sign up

OnePlus Phone Critical Security Vulnerability in Default Wallpapers app Leaks Users Email Address

guest Guest

Useful Searches