Starbucks · Report #367589
athome.starbucks.com - URL parameter tampering of review forms permitted possible content injection
Validstatus
mediumseverity
31upvotes
17 Mar 2020disclosed
Summary
jackb898 discovered that the review forms on the informational site athome.starbucks.com was susceptible to parameter tampering possibly allowing for creation of limited custom review form content.
@jackb898 — thank you for reporting the original vulnerability, the additional information and for confirming the resolution.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.