U.S. Dept Of Defense · Report #258573

Able to view Backend Database dur to improper authentication

Validstatus

mediumseverity

5upvotes

2 Dec 2019disclosed

How it was found

Vulnerable domain: https://█████████

Endpoint: https://█████████/schema/columns.byTable.html

Description: When you visit the above endpoint you will get all the backend database. Its a critical vulnerability and should be patch as soon as possible.

Let me know if you want any more details.

FInd the POCs:

Thanks.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original