Beginner FriendlyFoundry
100 EXP
View results
Submission Details
Severity: high
Valid

```checkList``` function has no onlySanta modifier

Summary

checkList function has no onlySanta modifier

Vulnerability Details

checkList function has no onlySanta modifier

Impact

Anyone can call checkList function

Tools Used

Manual

Recommendations

add onlySanta modifier

Updates

Lead Judging Commences

inallhonesty Lead Judge over 1 year ago
Submission Judgement Published
Validated
Assigned finding tags:

Access Control on checkList()

Anyone is able to call checkList() changing the status of a provided address. This is not intended functionality and is meant to be callable by only Santa.

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.