Race condition at create new Location

Disclosed: 2018-10-05 04:49:12 By zhurig To shopify
Low
Vulnerability Details
User can bypas restriction and create more ctore location, than maximum depends store plan. Intercept request and send it multiple at once. See screensots F350687 - requests F350688 - results I created 12 store location when 4 possible ## Impact Bypass the limitations of the billing plan
Actions
View on HackerOne
Report Stats
  • Report ID: 413759
  • State: Closed
  • Substate: resolved
  • Upvotes: 27
Share this report