Smule · Report #789370
[com.smule.autorap.*] Cloud Messaging/Push Notification service takeover due to clear-text usage of Legacy FCM Server keys in the client app
Validstatus
criticalseverity
10upvotes
24 Aug 2020disclosed
Summary
Potential FCM issues across several apps investigated and remediated.
Reference to Research:
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.