Kanova Android App Improper Access Control Vulnerability Allowing Unauthorized Access to User and Group Information

A vulnerability in the Kanova Android App, specifically in version 1.0.27 (package name com.karelane), developed by Karely L.L.C., has been identified. This vulnerability arises from improper access control, allowing attackers to manipulate API request parameters to gain unauthorized access to user details and group information, including entry codes. Exploitation of this vulnerability could lead to privacy breaches, unauthorized access to groups, and misuse of the platform.

Impact

Exploitation of this vulnerability could result in privacy violations, unauthorized access to user groups, and potential misuse of the Kanova platform.