Threats tagged 'ghsa-8w2c-cm2g-cxq6'

Lago versions through 1.55.0 have an authorization bypass vulnerability in the Invoices::Payments::StripeService component. This flaw allows users from one organization to mark invoices belonging to another organization as paid due to an unscoped invoice lookup. Attackers with control over their organization's Stripe integration can exploit this by signing a payment_intent.succeeded event containing a victim's invoice UUID, enabling unauthorized wallet top-ups or access to payment-gated subscriptions.