Discovered by Jake Cleland on behalf of The Missing Link Security
MicroRealEstate is vulnerable to an insecure direct object reference (IDOR) vulnerability in which tenants can view invoices from any existing user without authorisation. This disclosed personally identifiable information such as full names and addresses of other users as well as specific details about other users' rental terms.
Fixed Versions:
N/A
The Missing Link acknowledges the Traditional Owners of the land where we work and live. We pay our respects to Elders past, present and emerging. We celebrate the stories, culture and traditions of Aboriginal and Torres Strait Islanders of all communities who also work and live on this land.