Deleted SKU Causes Crash in User Manage Subscriptions page.

Disclosed by
NeverCookFirst
  • Engagement Undisclosed
  • Disclosed date 7 months ago
  • Reward $4,000
  • Priority P1 Bugcrowd's VRT priority rating
  • Status Resolved This vulnerability has been accepted and fixed
Summary by NeverCookFirst

A reproducible client crash occurs when a Discord user attempts to manage their subscriptions via the User Settings interface after any associated product SKU has been deleted by the developer. This affects users who have purchased products from verified applications and prevents them from accessing or managing any of their other subscriptions, effectively locking them into recurring payments. The issue is triggered by the client attempting to load metadata for a deleted SKU, resulting in a complete client crash and restart. This presents a denial-of-service condition within a critical billing-related feature.

Activity