ended9월 2일· 1 sources

The POST was guarded, the GET on the same URL was not: cross-tenant PII disclosure in CoopCycle (GET /api/stores/{id}/addresses)

Why it matters

TL;DR - What: In coopcycle-web — the open-source logistics and marketplace platform that worker-owned courier co-operatives self-host instead of renting a commercial delivery app — the operationGET /a...

1
Sources
+0
24h
—
Growth
12d
Active

Sources

devto
The POST was guarded, the GET on the same URL was not: cross-tenant PII disclosure in CoopCycle (GET /api/stores/{id}/addresses)9월 2일

Activity

타임라인 →

Related Issues