Mars · Report #3185001
Order More Than Maximum Allowed Quantity
Validstatus
32upvotes
2 Sept 2025disclosed
Summary
A business logic vulnerability allowed users to bypass product quantity limits (1-20 items) through parameter manipulation. While the UI enforced these limits, server-side validation was missing.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.