Nathcat / PeopleCat-Server

GNU General Public License v3.0
1 stars 0 forks source link

Get user request giving out passwords #4

Closed Nathcat closed 5 months ago

Nathcat commented 5 months ago

Noticed the server may be giving out user passwords on normal get user requests. This is allowed when responding to successful authentication but not when requesting the data of another user. Please investigate.