Kartpay · Report #642847
Application Design issue for Phone Number field in Registration.
Validstatus
lowseverity
15upvotes
5 Aug 2019disclosed
Summary
The current system only works for India so ISD Code of India i.e +91 is mandatory for Registration. During the Registration system was accepting any country ISD code due to Request was not validated by the system instead whatever sent through client-side modification is accepted. So the Strict Validation has been put to avoid any client-side modified request to accept any ISD code.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.