fssa-batch3 / fssa-batch3/sec_c_dharunraj.alagaruppu__corejava_project_2

IDOR Vulnerability

Open
#12 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Java
Stars
0
Forks
0
PR merge metrics
No merged PRs in 30d

Description

### Insecure Direct Object Reference (IDOR) Vulnerability

On the Calculation page, sensitive account numbers are being transmitted through URL parameters. This practice poses a significant security risk, as passing sensitive data, such as account numbers, via URLs makes it vulnerable to exploitation. If an attacker gains access to these account numbers, they can easily manipulate the URL to access other users' accounts and extract sensitive information about them. This vulnerability could lead to unauthorized access and privacy breaches, making it imperative to address this issue promptly.

image (4)

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.