While doing independent research I identified several vulnerabilities in Hutch Sri Lanka's website, including cross-site scripting (XSS), security misconfigurations and sensitive data exposure. The issues were reported to Hutch. Sensitive details are intentionally withheld.
HighReported
Hutch Sri Lanka website — XSS, misconfigurations and data exposure
Hutch Sri Lanka · Corporate website
Found multiple issues in Hutch Sri Lanka's website during self-directed research: cross-site scripting, security misconfigurations and sensitive data exposure.
Disclosure timeline
Issues identified during self-research.
Reported to Hutch Sri Lanka.