Garmin MapShare: Insecure Link Design and User Data Privacy (Part 2)
Password-protected MapShares had unauthenticated API endpoints allowing location requests and inReach messaging — plus guessable identifiers exposing public maps.
Read the articlePosts tagged
#api-security
1post