1 result · Clear filters · Feed
-
Critical 9.2
Inadequate access control in the Hiperdino REST API
Inadequate access control in Hiperdino’s REST v1.0 API. The public endpoint ‘customer/check’ could allow an authenticated attacker to enter a telephone number or an email address. When the value entered belongs to a registered customer, the service returns th…