Eternal · Report #512968
[api.zomato.com] Able to manipulate order amount
Validstatus
highseverity
136upvotes
16 Apr 2019disclosed
Summary
@pasw discovered an interesting find where he was able to manipulate the order amount. This was a creative find and we rewarded @pasw with double bounty + promotional bonus of $2,500.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.