AI Tool Identifies BOLA Vulnerabilities in Easy!Appointments
Unit 42 researchers used a GenAI-based automated BOLA detection tool to test the open-source scheduling application Easy!Appointments in 2023 and found 15 Broken Object-Level Authorization vulnerabilities, tracked as CVE-2023-3285 to CVE-2023-3290 and...