3 ms·
Enumeration vulns are very serious, it’s just luck that this one appeared to be low risk.
by f17428d27584 3mo ago
Enumeration vulns are very serious, it’s just luck that this one appeared to be low risk.
- swader999 3mo agoA competitor of the restaurant could see everything that was ordered that night. Pretty serious imo.
- zmgsabst 3mo agoOr profile the customers of every business, by changing both IDs.
- alex43578 3mo agoBut that’s my point: not all risks are the same. A cache issue that serves you someone else’s crossword puzzle is an inconvenience, but a cache issue that serves you someone’s credit report is way worse.
- Eisenstein 3mo agoBut what does it say about the payment app if it doesn't bother to secure the low hanging fruit?