writeups.xyz / Credit card statement disclosure vulnerability in Viseca's eXpense portal

Submitter : c2a

Date: 20 March 2023

Bounty : undisclosed

Vulnerabilities :

• IDOR

Programs :

• Viseca

Authors :

• Pentagrid (@Pentagridsec)

Link :
https://www.pentagrid.ch/de/blog/viseca-expense-credit-card-statement-disclosure/