personal-data-exposure

1
new top best new & best
quality: all 6+ 8+
7
0
Companies House flaw exposed five million directors

A critical authorization bypass vulnerability in Companies House's web filing system allowed unauthenticated access to any of five million company dashboards by leveraging improper session state handling during the multi-step filing process. The flaw exposed directors' home addresses, email addresses, full dates of birth, and enabled potential modification of company details and account filings.

authentication-bypass authorization-bypass broken-access-control session-management web-vulnerability information-disclosure personal-data-exposure gdpr api-security privilege-escalation
taxpolicy.org.uk · iamflimflam1· 29 days ago · 13 min · vulnerability · details · hn 4