Skip to content

Fix: IDOR allows editing another user's profile via PUT /IDOR/profile/{userId} - #490

Closed
beanbeah wants to merge 2 commits into
OWASP-CTF:dc34-ctffrom
beanbeah:ctf/r2-challenge-challenge-45-idor-edit-other-profile
Closed

Fix: IDOR allows editing another user's profile via PUT /IDOR/profile/{userId}#490
beanbeah wants to merge 2 commits into
OWASP-CTF:dc34-ctffrom
beanbeah:ctf/r2-challenge-challenge-45-idor-edit-other-profile

fix(idor): enforce ownership check on PUT /IDOR/profile/{userId}

fac7e33
Select commit
Loading
Failed to load commit list.
Sign in for the full log view

Annotations

1 warning
score
succeeded Aug 9, 2026 in 2m 5s