Moneybird · Report #133753
Content Spoofing In Moneybird
Validstatus
4upvotes
26 Aug 2016disclosed
Summary
Reporter found a content spoofing vulnerability in an OAuth related endpoint that reflected custom text present from the URL in the body. We have taken measurements to prevent this problem in the future.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.