ended4월 21일· 1 sources
Sensitive Data Exposure - The Bug That Looks Like a Feature Working Correctly
Why it matters
The API response came back 200. The data was correct. The test passed. Nobody noticed the response body also contained the user's hashed password, their internal account ID, a debug flag set to true, ...
1
Sources
+0
24h
—
Growth
150d
Active