Student data exposed on Andhra Pradesh Government Examination website!

tl;dr

Sai Sravan Prabhala, a cyber-security researcher, informed us of a critical vulnerability exposing the sensitive personal information of minors. This existed on the website of the Directorate of Government Examinations, Government of Andhra Pradesh’s for the 2021 examinations. While this functionality itself has been removed, to prevent it from occurring again assisted by Sai, we have written to them and CERT-In.


This is a companion discussion topic for the original entry at https://internetfreedom.in/ap-students-data-leak/