H1514 Ability to Edit Packaging Slip Templates and View Product & Shipping Information by a low privileged staff in a Sandbox Store
该报告还没有中文解读。
原文摘录
摘自原文（1967 字符中的一小部分）
It was observed that it is possible to edit packaging slip templates and then view the product and shipping information in the packaging slip by a low privileged staff in a sandbox store by simply navigating to the URL `https://<store>.myshopify.com/admin/settings/packing_slip_template`. It appears …
默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 Shopify 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @anshuman_bh · 版权归作者与 Shopify 所有