Submission Details
Impact:
Likelihood:
No Acces Control
Summary
in the initialize function, there is no access control
Vulnerability Details
anyone can set the address of the principal meaning anyone can be become the principal...this can lead to the school system failure
Impact
the impact can be high since there is no check on who becomes the school head
Tools Used
manual review
Recommendations
use constructor to se the address of the principal
Rewards breakdown
nSLOC
243This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.