chainning bugs to get full disclosure of Users addresses
该报告还没有中文解读。
原文摘录
摘自原文（2353 字符中的一小部分）
Summary: I was able to disclose any address that was used by the customers. The only barrier that came across that I need to put my visa on. On seeing that I managed to bypass it . just after bypassing that, my order was accepted and the price was set to free So i don't know actually if there is an …
默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 Glovo 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @spaceboy20 · 版权归作者与 Glovo 所有