Loading HuntDB...

Getting a free delivery by singing up from "[email protected]"

Medium
G
Glovo
Submitted None
Reported by cmuppin

Vulnerability Details

Technical details and impact analysis

Privilege Escalation
Hello Getting a free delivery for food by just signing up from "[email protected]" and you also see the " FREE delivery Glovo Team ∞" in profile section. To cross check, i made a another account by using regular email-id "[email protected] " and placed a order with same location but i didn't got any free delivery option. Steps To Reproduce: 1) Signup as "[email protected]" 2) Select any city 3) Place a order. Attached a screenshots for further reference. ## Impact Anybody can signup by using a @glovoapp.com, so they can easily get free delivery for food and extra privilege.

Report Details

Additional information and metadata

State

Closed

Substate

Resolved

Submitted

Weakness

Privilege Escalation