PT-2019-9762

Name of the Vulnerable Software and Affected Versions Stripe API v1 Description The issue allows remote attackers to bypass intended access restrictions. This is achieved by replaying XMLHttpRequest data to the API endpoint "/v1/tokens" on api.stripe.com, then parsing the response under the objec...