Shopify · Report #340191
Session works after logout from Shopify account
Validstatus
lowseverity
69upvotes
30 Mar 2020disclosed
Summary
@Cryptographer reported if a logout request for a given session was received during the time a product creation request was in progress from the same session, it was possible the logout request could fail. We determined this was the result of a race condition in how we were updating and revoking user sessions and have since fixed the issue.
{F732634}
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.