Vulnerabilities Expose Private Data in Indian Government Systems

An independent researcher discovered 14 vulnerabilities across Indian government portals — including critical access-control and information-disclosure flaws — that exposed personal and financial data (students’ enrollment and exam records, scholarship recipients’ bank accounts, and applicants’ data on the UPSC portal). The issues ranged from missing authentication and predictable file paths to an exposed administrative authentication interface and weaknesses enabling automated credential attacks; the government patched the flaws within two to three weeks.