Submission Details
Impact:
Likelihood:
[M-2] There aren't any checks when setting *cutOffScore* in `LevelOne::startSession`, which can cut off all students.
Summary
If cutOffScore parameter is incorect it can make the protocol works unexpected.
Vulnerability Details
cutOffScore > 100 -> the default score of users is set to 100, if the cutOffScore is bigger this means that all the students already need to be cut.
cutOffScore < 60 -> this means that even when the negative reviews are given to the users all of them will pass.
Impact
Not bounded cutOffScore can lead to inappropriate behaviour
Tools Used
Manual Review
Recommendations
Add checks at least for the top bounder.
Rewards breakdown
nSLOC
243This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.