Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2021/02/22 11:19 a.m.38 views

Shopify: The POS app doesn't revoke the Xauth token

It was identified that the POS android application doesn't revoke the authentication token when the user logs off from the session. More specifically despite the fact that the app removes the entry from the sharedprefs/defaultuser.xml, the token remains active on the server side and may be used t...

7.3AI score
SaveExploits0
Rows per page
Query Builder