First Flight #1: PasswordStore

Beginner FriendlyFoundry
100 EXP
Submission Details
Severity: high
Valid

Everyone can overwrite password

Updates

Lead Judging Commences

InAllHonesty Lead Judge
12 months ago
InAllHonesty Lead Judge 11 months ago
Submission Judgement Published
Validated
Assigned finding tags:

finding-lacking-access-control

Anyone can call `setPassword` and set a new password contrary to the intended purpose.

Support

FAQs

Can’t find an answer? Join our Discord or follow us on Twitter.