Business Logic Flaw Allowing Free Plan Users to Assign Restricted Roles

My name is Ziad Momen Ahmed, a cybersecurity student specializing in Web Penetration Testing, and currently expanding my skills in Mobile Penetration Testing. I have a strong passion for cybersecurity and continuously strive to improve myself and achieve meaningful milestones in this field.

I started my bug hunting journey in July, and today I’m excited to share my first resolved vulnerability that I discovered on a HackerOne program. So let’s get started.

The bug was a Business Logic vulnerability that allowed users to access paid features while they were on a free plan.

I started by exploring the application and breaking it down into its main functionalities. One of the features I decided to focus on was the invitation functionality.