Roast topics
Find topics
Roast it!
Roast topics
Find topics
Find it!
Login
From:
eaton-works.com
(Uncensored)
subscribe
Compromising Honda’s power equipment / marine / lawn & garden dealer eCommerce platform through a vulnerable password reset API
https://eaton-works.com/2023/06/06/honda-ecommerce-hack/
links
backlinks
A vulnerable password reset API made it possible to take over any account and gain admin-level access to the platform. In addition, broken/missing access controls made it possible to access all data on the platform.