[api.zomato.com] Able to manipulate order amount
High
Z
Zomato
Submitted None
Team Summary
Official summary from Zomato
@pasw discovered an interesting find where he was able to manipulate the order amount. This was a creative find and we rewarded @pasw with double bounty + promotional bonus of $2,500.
Actions:
Reported by
pasw
Report Details
Additional information and metadata
State
Closed
Substate
Resolved
Submitted
Weakness
Business Logic Errors