Actions:
Reported by
cmuppin
Vulnerability Details
Technical details and impact analysis
Hello
Getting a free delivery for food by just signing up from "[email protected]" and you also see the " FREE delivery Glovo Team
∞" in profile section.
To cross check, i made a another account by using regular email-id "[email protected] " and placed a order with same location but i didn't got any free delivery option.
Steps To Reproduce:
1) Signup as "[email protected]"
2) Select any city
3) Place a order.
Attached a screenshots for further reference.
## Impact
Anybody can signup by using a @glovoapp.com, so they can easily get free delivery for food and extra privilege.
Report Details
Additional information and metadata
State
Closed
Substate
Resolved
Submitted
Weakness
Privilege Escalation