Starbucks · Report #783332
Singapore - IDOR in campaign.starbucks.com.sg
Validstatus
mediumseverity
20upvotes
17 Mar 2020disclosed
Summary
bytebunny discovered an Insecure Direct Object Reference (IDOR) exposing limited marketing data for customers in Singapore.
@bytebunny — thank you for reporting the vulnerability and for confirming the resolution.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.