Summary by green_hats
An exposed API endpoint leaked 800+ user emails, names and other information related to NASA certifications. The API did not require any form of authentication.
Exposed Emails and Names on https://mttc.jpl.nasa.gov/api/retrieve-certs.php
Disclosed by green_hats- Engagement National Aeronautics and Space Administration (NASA) - Vulnerability Disclosure Program
- Disclosed date 2 months ago
- Priority P2 Bugcrowd's VRT priority rating
- Status Resolved This vulnerability has been accepted and fixed