Shipt | Report #1903322 - Improper Access Control + Financial fraud allows attacker to disclose + add arbitrary products to another's user's order | HackerOne

https://hackerone.com/reports/1903322

https://twitter.com/home/status/1788143117297733687

https://twitter.com/home/status/1788147052381167694

https://twitter.com/home/status/1788182360745242958