Insecure Direct Object Reference in Fluent Forms Stripe Payment Confirmation

The Stripe SCA payment confirmation endpoints in Fluent Forms accept a submission_id from the request without verifying that the caller is entitled to act on that submission. An unauthenticated attacker who can guess or enumerate a valid submission identifier can therefore tamper with the payment status of other users' form submissions, for... Weiterlesen