The Newphoria Koritore application before 1.1 for Android and before 1.1 for iOS allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified vectors.Referenceshttp://jvn.jp/en/jp/JVN24517322/995707/index.htmlhttp://jvndb.jvn.jp/jvndb/JVNDB-2015-000133http://jvn.jp/en/jp/JVN24517322/index.html