Threats tagged 'ghsa-mcww-5qq7-3cr5'

Business::GoCardless versions before 1.01 for Perl have a vulnerability where redirect flows are completed without verifying the session token. This allows an attacker who obtains another customer's redirect flow ID to create payments or subscriptions against that customer's mandate.