Unsecured /v1/users endpoint #7
Description
Not sure if you are aware, but users can be queried including their hashed passwords and private information by visiting the following REST endpoint:
https://immoperium.herokuapp.com/v1/users
You might consider securing it via API Keys or other means, limiting the shown information or remove it entirely.
Hope you'll find these information useful c: