Jump to content

Draft:Robin Justin

From Wikipedia, the free encyclopedia

Robin Justin is an Indian cybersecurity researcher known for discovering and responsibly disclosing critical security vulnerabilities in the Sarathi Parivahan portal, the national driving licence management system of India’s Ministry of Road Transport and Highways. His findings that could have exposed personal data for up to 185 million citizens—were fixed by CERT-IN in early 2023.[1][2]

Cybersecurity research

[edit]

In November 2022, while applying for his driving licence, Justin discovered multiple broken-access-control flaws in the Sarathi Parivahan portal. By chaining API endpoints, he was able to retrieve dates of birth, licence numbers, applicant photographs and uploaded identity documents without authorization. He reported these vulnerabilities to the Indian Computer Emergency Response Team (CERT-IN), which confirmed and remediated them by January 2023.[1][2]

References

[edit]
  1. ^ a b Osborne, Charlie (28 February 2023). "Indian transport ministry flaws potentially allowed creation of counterfeit driving licenses". PortSwigger. Retrieved 1 May 2025.
  2. ^ a b "MoRTH suffers a data breach". The Cybersecurity Daily News. 3 April 2023. Retrieved 1 May 2025.
[edit]

Category:Living people Category:Indian computer security researchers Category:Year of birth missing (living people)