First Flight #1: PasswordStore

Summary

Anyone can set a new password

Vulnerability Details

Notice says: @notice This function allows only the owner to set a new password.
But function don't have modifier or security check on msg.sender.

Impact

Anyone can set a new password overwriting the previous one.

Tools Used

Manual review

Recommendations

Add the line:

require(s_owner == msg.sender, "Not owner")

or by using the custom error:

if (msg.sender != s_owner) {
    revert PasswordStore__NotOwner();
}