Security Flaws in My College's ERP SystemUnauthenticated APIs leaking student data, a broken admin OTP flow, and endpoints still vulnerable weeks after disclosure.SecurityResponsible DisclosureWeb SecurityMay 2, 20251 min read