Weak Flask Session Secret

Title	Vulnerabilities	Programs	Authors
Leaked Secrets and Unlimited Miles: Hacking the Largest Airline and Hotel Rewards Platform	Path Traversal Authorization Bypass Hardcoded Credentials Weak Flask Session Secret Account Takeover	Points.com United Airlines Virgin	Ian Carroll (@Iangcarroll) Shubham Shah (@Infosec_au) Sam Curry (@Samwcyo)

Page 1 of 1