An insecure, direct object vulnerability in hunting/fishing license retrieval function of the "Fish | Hunt FL" iOS app versions 3.8.0 and previous versions allows a remote authenticated malicious user to retrieve other people's personal information and images of their hunting/fishing licenses.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
myfwc fish \\| hunt fl |
Vulmon