LOVENSE SEX TOY APP FLAW LEAKS PRIVATE USER EMAIL ADDRESSES

Summary from the TLDR InfoSec newsletter

A group of security researchers discovered two vulnerabilities in the Lovense sex toy app that could allow an attacker to retrieve a user's private email address with just their username and perform an account takeover with just an email address. To exploit the flaw, an attacker sends a POST request to the `/api/wear/genGtoken` API endpoint, then forwards the encrypted payload to another endpoint, which returns a fake ID that the user can add to their contact list to reveal the real email address. Lovense claims that both flaws were fixed. However, researchers report that only the account takeover flaw was fixed.