HexBrain

Kartpay · Report #642847

Application Design issue for Phone Number field in Registration.

Validstatus
lowseverity
15upvotes
5 Aug 2019disclosed

Summary

The current system only works for India so ISD Code of India i.e +91 is mandatory for Registration. During the Registration system was accepting any country ISD code due to Request was not validated by the system instead whatever sent through client-side modification is accepted. So the Strict Validation has been put to avoid any client-side modified request to accept any ISD code.

How it was found

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original