Code AnalysisIntermediate 50s
Trace: IDOR
GET /api/orders/123 returns another user's order with no ownership check. This is:
Starter code
// no authz check on order ownership
Think you can answer under pressure?
Get matched and answer live questions in 3-minute 1v1 battles. Elo ranking, badge tiers and bragging rights on the line.