HexBrain

Stripo Inc · Report #1166993

Ability to use premium templates as free user via https://stripo.email/templates/?utm_source=viewstripo&utm_medium=referral

Validstatus
highseverity
15upvotes
30 Mar 2022disclosed

How it was found

Summary:

Hello, I found security vulnerability in your web application, another business logic.

Steps To Reproduce

  1. Go to https://stripo.email/templates/?utm_source=viewstripo&utm_medium=referral
  2. Choose any premium template and click use in editor
  3. Then sign in to save and it is in your templates

Supporting Material/References:

Down there is video showing everything

  • [attachment / reference]

Impact

Lose of business

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original