Frontier Airlines Email Validation Endpoint Vulnerability

A vulnerability exists on the Frontier Airlines website through a publicly accessible endpoint that verifies whether an email address is linked to an account. This flaw allows an unauthenticated, remote attacker to identify valid email addresses, potentially facilitating further attacks.

Impact

Exploitation of this vulnerability could lead to unauthorized enumeration of email addresses associated with user accounts, which might be used for phishing or other social engineering attacks.