The backend infrastructure shared by multiple mobile device monitoring services does not adequately authenticate or authorize API requests, creating an IDOR (Insecure Direct Object Reference) vulnerability.
Affected Platforms
1Byte Ispyoo1Byte Thespyapp1Byte Secondclone1Byte The Truth Spy1Byte Exactspy1Byte Mxspy1Byte Copy91Byte Guestspy1Byte Fonetracker