Airbnb: I Can Delete Any Airbnb Users Symbol!

2015-02-27T03:43:07
ID H1:49356
Type hackerone
Reporter faisalahmed
Modified 2015-07-03T22:55:54

Description

Hello Team, I Noticed a Critical Flow that allows attacker to Delete Any Airbnb users Symbol!

ex: https://create.airbnb.com/16925230/symbol/delete * Just Copy The link and replace victim's profile id with 16925230. * Run the URL. * Victims Symbol will be deleted!

Looking Forward!