A security hole that allowed files and photographs transferred on GO SMS Pro to be made public was recently found by Trustwave researchers.
The researchers described the problem and let the app's creator know what they had discovered. The software uploads the file to its servers and publishes a web address for the recipient to click on when a user transmits a file to someone who doesn't have the app installed.
Unfortunately, the web addresses supplied by the app were sequentially numbered and simple to guess. Given enough time, a clever hacker or cybercriminal might guess the URL of an attachment and view its contents.
Trustwave shared its findings with TechCrunch, They were able to view private images like a screenshot with bank information, an order confirmation with a home address and an arrest record.
Source: https://www.komando.com/security-privacy/go-sms-pro-security-risk/765166/
"id": "GOS31012623",
"linkid": "go-sms.com",
"type": "Data Leak",
"date": "12/2020",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"