Rapido Reportedly Fixes Security Flaw That Exposed User and Driver Information

Rapido not too long ago mounted a safety flaw that uncovered private info associated to customers and drivers on the ride-hailing platform, in keeping with a report. A suggestions type designed for Rapido customers and drivers reportedly revealed their full names, e-mail addresses, and telephone numbers, by way of a portal that was found by a safety researcher. The corporate acknowledged the difficulty and has secured the portal with a view to forestall unauthorised entry to person and driver knowledge that might be used to focus on these customers in scams.

Rapido Units Uncovered Portal Detected By Safety Researcher to Non-public

TechCrunch reports that safety researcher Renganathan P found a safety flaw related with an internet site that was used to gather suggestions from each Rapido drivers and customers. The difficulty was associated to an utility programming interface (API) that will transmit the suggestions obtained from customers to a 3rd get together service, in keeping with the publication.

The affected portal was exposing private info associated to each Rapido customers and drivers, in keeping with the publication. This included customers’ e-mail addresses, telephone numbers, and the title they entered whereas submitting some suggestions utilizing the shape.

In keeping with the report, round 1,800 responses (together with e-mail addresses and telephone numbers) have been uncovered by way of the portal. The publication states that it verified the info was in a position to confirm the portal was revealing person knowledge, by submitting some textual content utilizing the identical type.

Rapido rapidly mounted the safety flaw that allow to the publicity of person and driver info, by setting the affected portal to non-public, in keeping with the report. “Whereas that is being managed by exterior events, we’ve got come to grasp that the survey hyperlinks have reached some unintended customers from the general public,” Rapido CEO Aravind Sanka instructed the publication.