Skip to content
Full Disclosure Mailing List

Whistlelink: Site-access password exposed in web server access logs via GET query string

Objectivity score: 42
Full Disclosure mailing list archives Whistlelink: Site-access password exposed in web server access logs via GET query string From: Red Nanaki via Fulldisclosure Date: Sun, 21 Jun 2026 09:44:34 +0000 Whistlelink: Site-access password exposed in web server access logs via GET query string Severity: CRITICAL SUMMARY The Whistlelink reporting portal protects optional...