Description
The Newphoria Koritore application before 1.1 for Android and before 1.1 for iOS allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified vectors.
References
- http://jvn.jp/en/jp/JVN24517322/995707/index.html
- JVNDB-2015-000133 third-party-advisory
- JVN#24517322 third-party-advisory