WHO COVID-19 Mobile App · Report #1070344
ArcGIS Rest Service linked to unsecured survey data
Validstatus
mediumseverity
3upvotes
13 Feb 2021disclosed
Summary
ArcGIS rest service url was followed, allowing discovery of unsecured survey data. Now fixed. This wasn't part of the WHO COVID-19 Mobile App but was resolved as it was reported here.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.