11–19 of 19 posts
Earlier quoted context omitted.
Yes please, I only checked the ones from homepage, I probably missed some if the other pages includes other scripts
Just open app.medvi.org and search in DevTools gmail/yahoo/icloud and you will see js bundle with emails. or seasonhealth/openloophealth to find another js bundle with staff emails.
Are the patient emails real patients or could they be test accounts?
Earlier quoted context omitted.
Just open app.medvi.org and search in DevTools gmail/yahoo/icloud and you will see js bundle with emails. or seasonhealth/openloophealth to find another js bundle with staff emails.
Mamma Mia I see them! Crazy 1018 customer mails addresses at first sight
How do you find such data leaks? Do you manually check all websites you visit?
So did you disclose this responsibly? Posting about it publicly first is asking for that sensitive data to be leaked. Might as well hack and repost that PII yourself.
So did you disclose this responsibly? Posting about it publicly first is asking for that sensitive data to be leaked. Might as well hack and repost that PII yourself.
This is not a data leakage. They deliberately included 999 of their customers' email addresses in publicly accessible JavaScript code in order to test certain features on them.
> A data leak is the unauthorized, often unintentional exposure of sensitive, confidential, or personal information to an external party, usually resulting from weak infrastructure, human error, or system errors.