3 ms·
> We determined that this vulnerability was due to inconsistent authorization checks and validation of data across several microservices that handle requests to
by the8472 5y ago
> We determined that this vulnerability was due to inconsistent authorization checks and validation of data across several microservices that handle requests to the npm registry. In this architecture, the authorization service was properly validating user authorization to packages based on data passed in request URL paths
Would 2FA have prevented that? If not then them loudly promoting 2FA before even mentioning this issue seems odd.