Starbucks · Report #762695
India - OTP bypass on Phone number verification for account creation
Validstatus
mediumseverity
20upvotes
21 Apr 2020disclosed
Summary
dekster discovered a mobile number verification bypass via incorrect client side validation allowing an attacker to validate a new account creation without a valid phone number attached. @dekster — thank you for reporting this vulnerability and for confirming the resolution.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.