The Newphoria Photon application before 1.2 for Android allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified vectors.Referenceshttp://jvn.jp/en/jp/JVN19948778/index.htmlhttp://jvndb.jvn.jp/jvndb/JVNDB-2015-000135http://jvn.jp/en/jp/JVN19948778/995707/index.html