Authentication Bypass in Subscription Management Endpoint

Summary

A vulnerability was identified in the subscription management functionality that allows unauthorized access to customer billing information. The issue stems from insufficient authentication and authorization controls on an API endpoint, which could potentially be exploited to access sensitive customer data.

Technical Details:

The vulnerability affects the subscription management API endpoint Missing authentication requirements allow unauthorized access The issue is classified as an Insecure Direct Object Reference (IDOR) vulnerability Customer identifiers can be manipulated to access other users' data

Resolution:

The vulnerability has been promptly addressed and fixed by the development team.