Skip to content

Fix BOLA: PUT /users/v1/{username}/password can no longer change another user's password - #65

Closed
beanbeah wants to merge 1 commit into
OWASP-CTF:dc34-ctffrom
beanbeah:ctf/challenge-2-unauthorized-password-change-bola
Closed

Fix BOLA: PUT /users/v1/{username}/password can no longer change another user's password#65
beanbeah wants to merge 1 commit into
OWASP-CTF:dc34-ctffrom
beanbeah:ctf/challenge-2-unauthorized-password-change-bola

Fix BOLA: reject password change for another user's account

770b779
Select commit
Loading
Failed to load commit list.
Sign in for the full log view

Annotations

1 warning
score
succeeded Aug 9, 2026 in 55s