Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2022/08/17 6:22 p.m.20 views

Stripe: [Broken Access Control ] Unauthorized Linking accounts & Linked Accounts info DIsclosure

@mrasg discovered that users of an account with member permissions were improperly allowed to see activated linked accounts and connect new carts to the account. I discovered a Vulnerability that allows the user who has member privileges to connect new carts to the Taxjar account , like...

6.9AI score
SaveExploits0
Rows per page
Query Builder