pentester.land· Aug 30, 2022· by Charansai💰 Bounty: 500

My findings on Hack U.S Program

Target Program: U.S. Dept Of Defense

🎯 Vulnerability: Web Security Vulnerability

💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.

#Missing authentication#.git folder disclosure#Information disclosure