3 ms·
The request came from a team that regularly deploys plain-text HTTP anonymous (unauthenticated) APIs for setting user passwords via an injection-vulnerable quer
by jiggawatts 3y ago
The request came from a team that regularly deploys plain-text HTTP anonymous (unauthenticated) APIs for setting user passwords via an injection-vulnerable query.
Don’t worry though, they “encrypt” the password.