covid-19-jurnal-medical icon indicating copy to clipboard operation
covid-19-jurnal-medical copied to clipboard

Published 20 hours ago • verified publisher icon code4romania

Sending daily emails to users can be stopped

Open RaduCStefanescu opened this issue 4 years ago • 0 comments

By using the https://prod-api.stamacasa.ro/api/profile/family/ IDOR an attacker is able to stop all users from receiving daily emails, as they are only sent to users without the ParentId set.

backend/src/StamAcasa.Common/Notifications/AssessmentNotificationsDispatch.cs

RaduCStefanescu avatar May 22 '20 15:05 RaduCStefanescu