Eternal · Report #265258
IDOR to cancel any table booking and leak sensitive information such as email,mobile number,uuid
Validstatus
highseverity
$250bounty
41upvotes
22 Oct 2017disclosed
Summary
Hacker is able to cancel the other user's table booking, The same request leaked the private information of the user (email & mobile no).
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.