Getting a free delivery by singing up from "[email protected]"

Disclosed: 2022-07-11 08:42:56 By cmuppin To glovo
Medium
Vulnerability Details
Hello Getting a free delivery for food by just signing up from "[email protected]" and you also see the " FREE delivery Glovo Team ∞" in profile section. To cross check, i made a another account by using regular email-id "[email protected] " and placed a order with same location but i didn't got any free delivery option. Steps To Reproduce: 1) Signup as "[email protected]" 2) Select any city 3) Place a order. Attached a screenshots for further reference. ## Impact Anybody can signup by using a @glovoapp.com, so they can easily get free delivery for food and extra privilege.
Actions
View on HackerOne
Report Stats
  • Report ID: 1296584
  • State: Closed
  • Substate: resolved
  • Upvotes: 40
Share this report