Submission Details
Severity:
Unlimited Reviews Due to Missing Review Count Increment
Summary
The reviewCount mapping is never incremented, rendering the check reviewCount[_student] < 5 ineffective.
Vulnerability Details
giveReview function in LevelOne
Check out the giveReview
Impact
Teachers can submit unlimited reviews for a student as long as they wait a week between each, bypassing the intended 5-review limit.
Tools Used
manual code review
Recommendations
update the review-mapping when teacher give review.
Updates
Lead Judging Commences
yeahchibyke 3 months ago
Submission Judgement Published Assigned finding tags:
reviewCount not updated
`reviewCount` for students is not updated after each review session
Rewards breakdown
nSLOC
243This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.