Tan Hi Ann's activity

From 21 July 2025 to 19 August 2025

04 August 2025

02:29 PM VELO Production Issue Bug #22306 (Resolved): [External Audit Findings][MLEB, iOS, Android] Bypass OTP in Biometric Acti...
RC: Modification of response parameters in the API allows an attacker to alter values such as item prices, item quant... Tan Hi Ann
02:27 PM VELO Production Issue Bug #22305 (Resolved): [External Audit Findings][MLEB, iOS, Android] Insecure Direct Object Refer...
RC: The IDOR vulnerability occurs when an app exposes internal object references without access control. This allows ... Tan Hi Ann

31 July 2025

09:58 AM VELO Production Issue Bug #22304 (Resolved): [External Audit Findings][MLEB, iOS, Android] User Enumeration through Err...
RC: Error messages provides valid and invalid username information.
Solution: Modify error message to generic mess...
Tan Hi Ann
 

Also available in: Atom