Porsche Website and API Vulnerability Leads to Data Exfiltration

Porsche’s website and GraphQL API were found to have a security vulnerability that allowed for data exfiltration through a Cross-Site Scripting (XSS) attack.
View full story…