Getting a free delivery by singing up from "[email protected]"
Medium
Vulnerability Details
Hello
Getting a free delivery for food by just signing up from "[email protected]" and you also see the " FREE delivery Glovo Team
∞" in profile section.
To cross check, i made a another account by using regular email-id "[email protected] " and placed a order with same location but i didn't got any free delivery option.
Steps To Reproduce:
1) Signup as "[email protected]"
2) Select any city
3) Place a order.
Attached a screenshots for further reference.
## Impact
Anybody can signup by using a @glovoapp.com, so they can easily get free delivery for food and extra privilege.
Actions
View on HackerOneReport Stats
- Report ID: 1296584
- State: Closed
- Substate: resolved
- Upvotes: 40