HexBrain

Glovo · Report #1296584

Getting a free delivery by singing up from "[email protected]"

Validstatus
mediumseverity
41upvotes
11 Jul 2022disclosed

How it was found

Hello Getting a free delivery for food by just signing up from "[email protected]" and you also see the " FREE delivery Glovo Team ∞" in profile section. To cross check, i made a another account by using regular email-id "[email protected] " and placed a order with same location but i didn't got any free delivery option.

Steps To Reproduce:

  1. Signup as "[email protected]"
  2. Select any city
  3. Place a order.

Attached a screenshots for further reference.

Impact

Anybody can signup by using a @glovoapp.com, so they can easily get free delivery for food and extra privilege.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original