Course
In this exercise, the developer fixed the previous bug by preventing direct creation of a user with admin privileges. However, a deeper review reveals another vector to achieve the same result.
Skills covered
Authentication
Authorisation
CWE-285, CWE-697, CWE-1321
Included with PRO
Full course content
2 videos
Ready to practice?
Get access to this lab and 600+ hands-on exercises with a PRO subscription.