Flaw in Online Travel Booking Site Exposes Millions of Users to Account Takeover

By exploiting this flaw, attackers can gain unauthorized access to any user’s account within the system, effectively allowing them to impersonate the victim and perform an array of actions on their behalf.