Lack of authentication in file-viewing components in DDRT Dashcom Live 2019-05-09 allows anyone to remotely access all claim details by visiting easily guessable dashboard/uploads/claim_files/claim_id_ URLs.Referenceshttp://ddrt.co.uk/complaint-handling-software/https://domdomegg.github.io/CVE-2019-11020.pdf
