pentester.land· Nov 16, 2021· by Mostafa Mamdoh💰 Bounty: 700

Full account takeover through referral code.

Target Program: Shipt

🎯 Vulnerability: Web Security Vulnerability

💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.

#Broken authentication#Account takeover