Description

I have found Business logic Bug in para application free User can create more than 1 app even after App limit reached

Proof of Concept

1 - Go to https://paraio.com/apps

2 - Create a new app

3- Enter the name of app

4- Intercept the request in burp suite and send into intruder and select payload as number and select number

5- Start Attack

Video Poc -: https://drive.google.com/file/d/1xyUY-QK0y_XIPKjfkh-nib6HsTVELP9R/view?usp=sharing

Screenshot of POC :- https://drive.google.com/file/d/1Mqr9WNqWWwcPBN8xqxITYwvV8wXhoLbx/view?usp=sharing