Hi,
This bug I found it before 2 weeks I already share it on Facebook.
With this bug you can see the amount of money on (credits or card) and the country of account with no password.
I already report it on HackerOne but I got duplicate on it and it's not fixed yet.
Bug url:
https://www.paypal.com/myaccount/transfe...recipient= + email.
for amount of money search for "rate" parameter for country search "recipientCountryName".
Thanks.
Sometimes you can't see the true amount.
This bug I found it before 2 weeks I already share it on Facebook.
With this bug you can see the amount of money on (credits or card) and the country of account with no password.
I already report it on HackerOne but I got duplicate on it and it's not fixed yet.
Bug url:
https://www.paypal.com/myaccount/transfe...recipient= + email.
for amount of money search for "rate" parameter for country search "recipientCountryName".
Thanks.
Sometimes you can't see the true amount.
