WhiteHat Jr exposed personal data of 2.8 lakh students, teachers; leaked transaction details too: Report

25-Nov-2020

Popular online coding platform WhiteHat Jr. reportedly exposed personal data of over 2.8 lakh students and teachers because of the multiple vulnerabilities which were present in its servers until the middle of November. The platform has stated that they fixed the flaws which were present in its servers until the middle of November. The platform has stated that they fixed their flaws after they were informed by a security researcher. It is not clear if the affected data was compromised until the loopholes were patched. Also, last month, the Mumbai-based coding platform had another issue wherein it was reportedly leaking students' personal data and transaction details. The security researcher who had discovered the vulnerabilities within WhiteHat Jr had made multiple disclosures to the firm for over a month between October 6 and November 20, according to a report by The Quint. The issues were present because of a misconfigured backend server which was responsible in exposing the data which included the student names, age, gender, profile photos, user IDs, parents name, and progress reports. The data also included details of a larger number of minor students.
The vulnerabilities also allowed access to information related to teachers and partners of students. Salary details of WhiteHat Jr employees and as well as its internal documents and also dozens of recorded videos of online classes were exposed, according to the report.