Card Factory Exposed Customers Photos Publicly Due To A Website Flaw

guest · Oct 18, 2018

Card Factory Exposed Customers Photos Publicly Due To A Website Flaw
October 18, 2018
https://latesthackingnews.com/2018/...tomers-photos-publicly-due-to-a-website-flaw/

Once again, a website glitch at a retailer has put the security and privacy of customers’ data at first. This time, it is a UK-based gift store who inadvertently became a victim of cybersecurity error.

As disclosed by Mashable, a popular gift store Card Factory exposed customers photos to anyone due to a flaw in its website.

Mashable stated that the exploit involved a simple URL trick, which they verified themselves too. They also quoted Luka Kladaric, founder of Sekura Collective and a software engineer, who thinks of it as ‘unacceptable’.

“This type of vulnerability is called ‘insecure direct object reference’. It is fairly common and totally unacceptable.”
According to Mashable, the site owners got news of the error on October 8, 2018. But, they paid no heed to it. In fact, they threatened the researcher to remove whatever he has got from the site and to stop conducting such site testing. They further pushed him not to disclose the matter publicly.
Click to expand...

Log in or Sign up

Card Factory Exposed Customers Photos Publicly Due To A Website Flaw

guest Guest

Log in or Sign up

Card Factory Exposed Customers Photos Publicly Due To A Website Flaw

guest Guest

Useful Searches