← Access Control in Depth
LabLesson 2 of 5 · 45 min
Lab: editing a profile that is not yours
PractitionerBroken access control / IDOR
Editing a profile that is not yours
Reach an object that was never yours by changing the id that names it.
Open the lab →