Essity: Unauthenticated Account Registration + Email Verification Bypass + PII Data Leak (2,480 Records) on ████████

A vulnerability was discovered in the portal of the organization. The vulnerability allowed any unauthenticated attacker to register an account, bypass email verification, and access protected API endpoints that leaked 2,480 employee records containing names, emails, and profile URLs. The...