Shopify · Report #92453
unauthorized access to all customers first and last name
Validstatus
$2,500bounty
4upvotes
6 Oct 2015disclosed
Summary
This issue allowed any merchant to search for users by their ID. The search would retrieve the first name and last name of any registered customer that belonged to any shop in Shopify.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.