Recently, we discovered one of those vulnerabilities that could have turned into a real nightmare for a company. Using our innovative tool on the A42 platform, we came across an API route within a large network of websites with a total monthly traffic of 30 million users. This API allowed emails to be sent from the corporate mail server to any address without authentication, with any subject and content.
Serhii