Submission Details
Severity:
Poor test coverage
Summary
Test only has 2 tests and does not have sufficient coverage
Vulnerability Details
Test coverage is poor
It does not even test that anyone must be denied from setting password missing the critical access control error
Impact
Poor testing leads to missed vulnerabilities in code.
Tools Used
Manual Analysis
Recommendations
Testing must aim for 100% coverage with 90% and above being good. Tests must consider all branches, possibilities, users, actions, threat models, variations etc. Test must include invariant and fuzz testing
Updates
Rewards breakdown
nSLOC
20This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.