Starbucks · Report #141120
Parameter Manipulation allowed for editing the shipping address for other user’s teavana.com subscriptions.
Validstatus
37upvotes
26 Jan 2017disclosed
Summary
@meals discovered a vulnerability which allowed the shipping address for teavana.com order subscriptions to be edited without proper authorization. Thanks @meals!
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.