ok.ru · Report #217679
ВИП подарки бесплатные без подключения ВИП услуги
Validstatus
mediumseverity
7upvotes
5 Sept 2018disclosed
Summary
Attacker could send VIP gifts for free due to insecure direct object reference.
Недостаточная проверка прав при дарении подарка позволяла дарить VIP подарки бесплатно.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.