> Exposed admin panel with no allow list or MFA
> WAF bypass

nothing like quality web services design! https://t.co/WPZA1ygwgS