Airbnb: I Can Delete Any Airbnb Users Symbol!

ID H1:49356
Type hackerone
Reporter faisalahmed
Modified 2015-07-03T22:55:54


Hello Team, I Noticed a Critical Flow that allows attacker to Delete Any Airbnb users Symbol!

ex: * Just Copy The link and replace victim's profile id with 16925230. * Run the URL. * Victims Symbol will be deleted!

Looking Forward!