First Flight #1: PasswordStore

Beginner FriendlyFoundry
100 EXP
Submission Details
Severity: high
Valid

Unauthorized Password Modification in 'setPassword' Function

Updates

Lead Judging Commences

InAllHonesty Lead Judge
12 months ago
InAllHonesty Lead Judge 11 months ago
Submission Judgement Published
Validated
Assigned finding tags:

finding-lacking-access-control

Anyone can call `setPassword` and set a new password contrary to the intended purpose.

Support

FAQs

Can’t find an answer? Join our Discord or follow us on Twitter.