user with no draft order permission can still perform action on draft order's in stocky app (idor)

Disclosed: 2020-07-14 22:39:19 By imranhudaa To shopify
Unknown
Vulnerability Details
No vulnerability description provided or it is restricted.
Actions
View on HackerOne
Report Stats
  • Report ID: 802286
  • State: Closed
  • Substate: resolved
  • Upvotes: 23
Share this report