Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Unauthorized Access fro Modification of User Details via Account Number #2

Open
Lohithsurya opened this issue Oct 16, 2024 · 25 comments
Assignees
Labels
Bounty:250 bug Something isn't working

Comments

@Lohithsurya
Copy link

If a user knows the account number, they are able to change the personal details of the account holder without any further authentication or authorization. This poses a security risk as anyone with the account number can modify sensitive information.

Expected Behavior:
Modifying account details should require proper authentication, such as a password .
Simply knowing the account number should not allow changes to personal information.

@Lohithsurya Lohithsurya added the bug Something isn't working label Oct 16, 2024
@Lohithsurya Lohithsurya changed the title Unauthorized Access to User Details via Account Number Unauthorized Access fro Modification of User Details via Account Number Oct 16, 2024
@MKD2004
Copy link

MKD2004 commented Oct 18, 2024

Can i be assigned this one??

@Lohithsurya
Copy link
Author

!assign @MKD2004

@Rxnnie-08
Copy link

Can I be assigned to this issue?

@Lohithsurya
Copy link
Author

!assign @Rxnnie-08

@Lohithsurya
Copy link
Author

@Rxnnie-08 default time is 30mins show me the progress and i will extend the time (show me before the time runs out)

@Shaynazg
Copy link

Can I pls be assigned?

@bunsamosa-bot
Copy link

bunsamosa-bot bot commented Oct 18, 2024

Hey @Lohithsurya! The timer for the @Rxnnie-08 to work on the issue has finished, deassign and assign a new contributor or extend the current timer. Contact maintainer leads if inactive @DedLad @polarhive @achyuthcodes30

@Rxnnie-08 Rxnnie-08 removed their assignment Oct 18, 2024
@Anyaaa-2
Copy link

can i get assigned

1 similar comment
@Omkar-Patil-08-05
Copy link

can i get assigned

@RisuKumari11
Copy link

can i get assigned this

@Lohithsurya
Copy link
Author

!deassign

1 similar comment
@Lohithsurya
Copy link
Author

!deassign

@RohanChirbi
Copy link

Can I get assigned to this issue? @Lohithsurya

@atharv24mittal
Copy link

can i get it assigned?

@Ruchavw
Copy link

Ruchavw commented Oct 18, 2024

can I please get this assigned

@avaniajith
Copy link

avaniajith commented Oct 18, 2024

can I please get this assigned?

@aniruddhajoshi100
Copy link

can I get this assigned?

@atharv24mittal
Copy link

can i get this assigned?

@chandan365c
Copy link

@Lohithsurya can you assign this to me?

@Lohithsurya
Copy link
Author

!assign @Anyaaa-2

@Gunika-Goel
Copy link

can i be assigned please?

@bunsamosa-bot
Copy link

bunsamosa-bot bot commented Oct 18, 2024

Hey @Lohithsurya! The timer for the @Anyaaa-2 to work on the issue has finished, deassign and assign a new contributor or extend the current timer. Contact maintainer leads if inactive @DedLad @polarhive @achyuthcodes30

@Anyaaa-2
Copy link

can you extend it and give me more time

@KaparthyReddy
Copy link

could u assign this

@KaparthyReddy
Copy link

could u assign this

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Bounty:250 bug Something isn't working
Projects
None yet
Development

No branches or pull requests