1841272 - Card details fields are auto-completed with the account credentials at paypal.com

Status: NEW

(Toolkit :: Form Autofill, defect, P3)

Description

[Raul Bucata]

Attachment: 20230630_163757.mp4

Environment:
Operating System: Windows 10 PRO x64
Firefox version: Firefox Nightly 116.0a1 (2023-06-29) (64-bit)

Preconditions:
Account login performed

Steps to reproduce:

1. Navigate to: https://www.paypal.com/myaccount/summary
2. Click on the "Add card or bank" option.
3. Select the "Link a debit or credit card" option.
4. Wait for the new page to load and refresh the page.
5. Observe the result.

Expected Behavior:
The Card details fields are empty.

Actual Behavior:
The "Expiration date" and "Security code" fields options are auto-filled with the account credentials.

Notes:

1. Reproducible regardless of the status of ETP.
2. Reproducible on the latest build of Firefox Nightly and Release.
3. Works as expected using Chrome.
4. The CVV field seems to be auto-completed with the password when first accessing the page.

Comment 1

[Raul Bucata]

Verified this issue and still reproduces on Firefox 123 and 125. CVV section is autocompleted most of the time.

Tested with:

Browser / Version: Firefox Release 123.0 (64-bit)/ Firefox Nightly 125.0a1 (2024-02-26) (64-bit)/ Chrome Version 122.0.6261.70 (Official Build)
Operating System: Windows 10 PRO x64

Comment 2

[BugBot [:suhaib / :marco/ :calixte]]

The severity field is not set for this bug.
:serg, could you have a look please?

For more information, please visit BugBot documentation.