What 345 Days of Untested Exposure Looks Like at a Bank
…The platform exposed an API endpoint that returned organization records when given a tenant ID. The endpoint required no authentication and no session of any kind. The platform's cross-origin policy…
