Skip to content
OpenAdvisories

Product · Hiperdino

REST API

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.2

    Inadequate access control in the Hiperdino REST API

    Inadequate access control in Hiperdino’s REST v1.0 API. The public endpoint ‘customer/check’ could allow an authenticated attacker to enter a telephone number or an email address. When the value entered belongs to a registered customer, the service returns th…