Somalia’s relaunched e-visa website contains a fresh security flaw that could let malicious actors download large numbers of e-visas containing passport numbers, full names and dates of birth, Al Jazeera confirmed this week after receiving a tip from a web developer.
The vulnerability, which Al Jazeera was able to replicate, allowed the downloading of e-visas for dozens of applicants in a short period, exposing sensitive data on people from Somalia, Portugal, Sweden, the United States and Switzerland. Al Jazeera alerted…