Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2021/09/02 12:49 p.m.81 views

Stripe: User can pay using archived price by manipulating the request sent to `POST /v1/payment_pages/for_plink`

@gregxsunday discovered a way to purchase a product with an archived price using a payment link. The bypass was possible because of missing validation. A change was shipped to ensure both the payment link and price are active. Note: This bug was accepted and received before our minimum bounty...

6.9AI score
SaveExploits0
Rows per page
Query Builder