writeups.xyz / Customer account takeover in Shopify stores

Submitter : c2a

Date: 13 August 2023

Bounty : undisclosed

Vulnerabilities :

• Account Takeover
• OAuth

Programs :

• Shopify

Authors :

• Ophion Security (@OphionSecurity)

Link :
https://ophionsecurity.com/blog/shopify-acount-takeover