Threats tagged 'ghsa-5gmm-hjfj-8ff7'

Paymenter payment platform versions prior to 1.5.7 contain a race condition in the service downgrade process that allows authenticated users to trigger multiple refunds for a single downgrade. This occurs because the downgrade logic lacks transactional safety and proper database locking, enabling concurrent requests to bypass concurrency checks and inflate user credit balances. The inflated credits can be used immediately for future payments or service provisioning, causing direct financial loss to the operator.