Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2019/09/20 7:36 a.m.104 views

Shopify: Bypass report #416983 - Removed Staff members who had "Apps" permission can still modify flow app connections

The following report intends to disclose a bypass for 416983. It's been found that removed staff members who had "Apps" permission can still modify flow app connection settings due to improper authorization. Description Signed URLs generated by Shopify Flow https://apps.shopify.com/flow use a...

0.3AI score
SaveExploits0
Rows per page
Query Builder