Executive Summary

This vulnerability occurs because the payment integration with Oppwa-based payment methods does not properly validate payment status responses.

An attacker can take a successful payment status response from one payment and reuse it for a different payment in the system.

This allows the attacker to gain access to multiple valid tickets by making only one actual payment.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can lead to unauthorized access to multiple valid tickets without making the corresponding payments.

This means an attacker could exploit the system to obtain goods or services fraudulently, causing financial loss to the business.

Useful 0 Not Useful 0