Unauthorized Canceling/Unsubscribe TaxJar account & Payment information DIsclosure
Medium
S
Stripe
Submitted None
Team Summary
Official summary from Stripe
@mr_asg discovered that users of an account with member permissions were improperly allowed to view certain subscription details and cancel the subscription for that account.
Actions:
Reported by
mr_asg
Report Details
Additional information and metadata
State
Closed
Substate
Resolved
Bounty
$500.00
Submitted
Weakness
Improper Access Control - Generic