Hawk High

First Flight #39
Beginner FriendlySolidity
100 EXP
View results
Submission Details
Severity: low
Valid

[H-2] No Session Check on LevelOne::giveReview() function

Description:
There's no session checks for the giveReview() functions at LevelOne.sol which could allow a teacher to gives review to a students when its not a study session.

Impact:
Teacher can give reviews to a students outside study session.

Tools used:
Manual review

Remediation:
Add notYetInSession modifier

- function giveReview(address _student, bool review) public onlyTeacher {
+ function giveReview(address _student, bool review) public onlyTeacher notYetInSession {
Updates

Lead Judging Commences

yeahchibyke Lead Judge 6 months ago
Submission Judgement Published
Validated
Assigned finding tags:

session state not updated

`inSession` not updated after during upgrade

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.