Instacart · Report #148417
CSRF with redeem coupon request
Informativestatus
2upvotes
13 Aug 2016disclosed
Summary
This behavior is working as intended. We have a number of fraud prevention mechanisms in place that limit the effects of a single entity abusing this feature.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.