A hidden GraphQL mutation even allowed the researcher to promote any user to admin, giving full control over store listings, notifications, and more.
Burger King Uses DMCA to Remove Blog Exposing Drive-Thru System Security Flaws
A hidden GraphQL mutation even allowed the researcher to promote any user to admin, giving full control over store listings, notifications, and more.