Kartpay · Report #653214
Error Page Content Spoofing or Text Injection [https://vpn.kartpay.com/]
Validstatus
3upvotes
1 Aug 2019disclosed
Summary
VPN URL is accessible to the Public which is a misconfiguration of VPN Setup. So the Setup has been fixed and only internal network can access the VPN systems,
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.