Kartpay · Report #662108
Being able to change account contents even after password change
Validstatus
mediumseverity
32upvotes
6 Jan 2021disclosed
Summary
Improper Handling of Sessions leads to this vulnerability where users can try to login with 2 different sessions in 2 different browsers. changing any data doesn't reflect all the logged-in sessions.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.