1 link tagged with all of: vulnerability + airline + brute-force + data-exposure
Click any tag below to further narrow down your results
Links
A security researcher discovered a vulnerability in Avelo Airlines' reservation API that allowed a brute-force attack to access sensitive passenger information. The flaw stemmed from missing last name verification and lack of rate limiting, enabling attackers to retrieve personal data in just hours.