Skip to content

Unauthorized Withdrawals or Deposits Using Only Account Number #3

@Lohithsurya

Description

@Lohithsurya

Users are able to withdraw or deposit money by only providing the account number, without needing any additional authentication such as a password. This creates a security flaw, as anyone with access to the account number can perform unauthorized transactions.

Expected Behavior:
To withdraw or deposit money, users should be required to provide more details, such as:
Full name as registered in the system
Password
Simply knowing the account number should not allow financial transactions to be executed.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions