InterSources Identifies an API Vulnerability in Shopify’s Vulnerability Disclosure Program
Restricted staff accounts could retrieve gift-card codes and balances through the API even though the interface denied access. Here is how the team found it and what it recommends.
Read the finding
