SecurityThe Registerabout 2 hours ago
Vatican Prayer App Leaks 700K Users' Data
4 min read
Click To Pray, the official app of the Pope's Worldwide Prayer Network, leaked 719,517 users' names and email addresses through an Insecure Direct Object Reference bug. The vulnerability, reported in January, remains unpatched. The API exposes user data with sequential IDs and no rate limiting.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
