Zomato: [www.zomato.com] IDOR - Delete/Deactivate ANY/ALL Promos through a Post Request at **clients/promoDataHandler.php**

2017-08-30T17:07:05
ID H1:264754
Type hackerone
Reporter prateek_0490
Modified 2017-12-28T13:26:58

Description

@prateek_0490 found a IDOR issue which can deactivate any special offer in our platform.