Story

Reverse Engineering US Airline's PNR System and Accessing All Reservations

bearsyankees Friday, December 19, 2025
Summary
The article discusses a vulnerability found in the Avelo Airlines reservation API that could allow unauthorized access to customer data, including personal information and flight booking details. The vulnerability was responsibly disclosed to Avelo, who addressed the issue and implemented security measures to protect customer data.
80 39
Summary
alexschapiro.com
Visit article Read on Hacker News Comments 39