The issue was fixed and confirmed as mitigated, and a CVE was raised on September 4. It is, however, an alarming vulnerability involving flawed token validation that can result in cross-tenant access.
The RBI will implement new digital payment authentication rules from April 1, 2025, allowing alternatives to SMS OTP while ...