bcgov / entity

ServiceBC Registry Team working on Legal Entities
Apache License 2.0
23 stars 58 forks source link

BUG - Security Issue - User is able to see other users' applications #23279

Open rstens opened 5 days ago

rstens commented 5 days ago

It is possible to retrieve the details of an application from another user by simply changing the url:

rstens commented 5 days ago

@jdyck-fw Probably a high risk item that we want to address.