search

scorelab / OpenMF

An Open Source Mobile Forensics Investigation Tool for Android Platform
Apache License 2.0
146 stars 94 forks source link

Adding authentication to user end points. List, GetUser, Count and Delete #166

Open ShanuWije opened 3 years ago

ShanuWije commented 3 years ago

As part of the master of information security bug bounty assignment have identified that these endpoints needs to be secured. Otherwise any one can view the list of users and get the count without even login in

Description

As part of the master of information security bug bounty assignment have identified that these endpoints needs to be secured. Otherwise any one can list the users and get the count without login in

Fixes # (issue)

Type of change

Security fix