Unauthenticated Access to Internal Files via Direct Object Reference (UUID-based) Leading to Sensitive Data Exposure

Disclosed by

Engagement National Aeronautics and Space Administration (NASA) - Vulnerability Disclosure Program
Disclosed date 9 Sep 2026 4 days ago
Priority P1 Bugcrowd's VRT priority rating
Status Resolved This vulnerability has been accepted and fixed

Summary by Maholi_Tumanggor

An unauthenticated access control vulnerability allowed access to internal files by directly referencing UUID-based resources. The issue could potentially expose sensitive information to unauthorized users. The vulnerability was responsibly reported to the organization for remediation.

Unauthenticated Access to Internal Files via Direct Object Reference (UUID-based) Leading to Sensitive Data Exposure

Summary by Maholi_Tumanggor

Activity