CVE-2020-13129: Heinekingmedia Stashcat

High severity, CVSS 7.2. EPSS: 1.7% chance of exploitation in the next 30 days.

An issue was discovered in the stashcat app through 3.9.1 for macOS, Windows, Android, iOS, and possibly other platforms. The GET method is used with client_key and device_id data in the query string, which allows attackers to obtain sensitive information by reading web-server logs.

Affected products

• Heinekingmedia Stashcat: up to and including 3.9.1

Published 2020-05-18. Last modified 2026-06-17.