BLUVOYIX Password Exposure Vulnerability via Unauthenticated APIs

A vulnerability in BLUVOYIX exists due to improper password storage and exposure through unauthenticated APIs. This allows remote attackers to send crafted HTTP requests to the users API, retrieving plaintext passwords of all users. Exploitation could lead to full access to customer data and complete compromise of the platform by logging in with an exposed admin email and password.

Impact

Successful exploitation allows access to all user plaintext passwords, leading to unauthorized access to customer data and potential full compromise of the platform using an admin account.