Zenly Social-Media App Bugs Allow Account Takeover

From threatpost.com

A pair of bugs in the Snap-owned tracking app reveal phone numbers and allow account hijacking.

Zenly, a social app from Snap that allows users to see the locations of friends and family on a live map, contains a pair of vulnerabilities that could endanger those being tracked.

According to the Checkmarx Security Research Team, the bugs are a user-data exposure vulnerability and an account-takeover vulnerability. Both have been patched, and users should upgrade their apps to the latest version to avoid compromise.

Read more…