Security News > 2023 > May > Parental control app with 5 million downloads vulnerable to attacks
The Kids Place app is a parental control suite with 5 million downloads on Google Play, offering monitoring and geolocation capabilities, internet access and purchasing restrictions, screen time management, harmful content blocking, remote device access, and more.
Researchers at SEC Consult have found that the Kids Place app versions 3.8.49 and older are vulnerable to five flaws that could impact the safety and privacy of its users.
An attacker could exploit the app's dashboard feature, originally intended for parents to send files up to 10MB to their child's device, to upload arbitrary files to an AWS S3 bucket.
The app user can temporarily remove all usage restrictions to bypass parental controls.
App users can update to the latest version by opening the Google Play store, tapping their account icon, selecting 'Manage apps & device,' and tapping on 'Check for updates.
Long-press the app's icon and then select App info App details Update.