hard20 pts · first answer countssecurity-testing
Viewing another user's invoice
While logged in as user A, you change the URL from /invoices/1001 to /invoices/1002 and see user B's invoice. What type of vulnerability is this?
Discussion 0
Join free to post in the discussion.
Related questions
- Probing for SQL injectionQA Engineer
- Testing a search box for XSSQA Engineer
- File upload validationQA Engineer
- Using production data for testsQA Engineer
- Tampering with a JWTQA Engineer
- Mass assignment in profile updateQA Engineer
- XSS that survives HTML encodingQA Engineer
- 401 or 403Automation Test Engineer