Starbucks · Report #766770
China - Leaked credentials permitted a limited ability to create Starbucks coupons and cards
Validstatus
highseverity
5upvotes
1 Apr 2020disclosed
Summary
neweq discovered a Github repository exposing credentials with which they could obtain an access token. The access token permitted limited access to generate Starbucks coupons and cards. @neweq — thank you for reporting this vulnerability.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.