Exclusive: Security breach on Pepperfry exposes details of users; now plugged

guest · Sep 6, 2019

Exclusive: Security breach on Pepperfry exposes details of users; now plugged
September 6, 2019
https://www.moneycontrol.com/news/t...ses-details-of-users-now-plugged-4411901.html

A major security flaw was detected on online furniture store Pepperfry's website, which could have allowed users to sign in to another registered user's account. Pepperfry has claimed that the bug was fixed within an hour of being detected.

The flaw was with the website's 'Internal Authentication' Application Program Interface (API), which allowed users to auto-login. The same API showed personal information of users such as their name, address, contact number etc.
The bug could have potentially affected over 2 million Pepperfry users had it not been addressed in time. Such flaws have earlier led to massive data leaks wherein personal information of users was breached.
Click to expand...

Log in or Sign up

Exclusive: Security breach on Pepperfry exposes details of users; now plugged

guest Guest

Log in or Sign up

Exclusive: Security breach on Pepperfry exposes details of users; now plugged

guest Guest

Useful Searches