TLDR Tech / InfoSec
Vatican's Official Prayer App Leaks 700K+ Global Users' PII
A white hat hacker found an IDOR flaw in Click to Pray that exposes names, email addresses, countries, account status, and admin roles for over 700,000 users via an unauthenticated API endpoint.
Read the full story