Click any tag below to further narrow down your results
Links
A security researcher discovered a vulnerability in Avelo Airlines' reservation API that allowed a brute-force attack to access sensitive passenger information. The flaw stemmed from missing last name verification and lack of rate limiting, enabling attackers to retrieve personal data in just hours.