fssa-batch3 / fssa-batch3/sec_c_dharunraj.alagaruppu__corejava_project_2
IDOR Vulnerability
- Dominant language
- Java
- Stars
- 0
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Description
### Insecure Direct Object Reference (IDOR) Vulnerability
On the Calculation page, sensitive account numbers are being transmitted through URL parameters. This practice poses a significant security risk, as passing sensitive data, such as account numbers, via URLs makes it vulnerable to exploitation. If an attacker gains access to these account numbers, they can easily manipulate the URL to access other users' accounts and extract sensitive information about them. This vulnerability could lead to unauthorized access and privacy breaches, making it imperative to address this issue promptly.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.