Discovering OTP Validation Bypass and IDOR in a Data Export Function
0 net
Tags
During a recent white-box penetration testing engagement, I discovered two serious vulnerabilities in a web application used by service…