Software
framework just told every customer their data leaked — the bug was a password reset box
A password-reset endpoint with a CVSS 10.0 score let attackers become Metabase admins with zero credentials — and Framework's customers paid for it.
Aliteq Team · Aug 9 · 6 min