Find the missing authorization check that lets any logged-in user edit any post.
Scenario
A user reported they were able to edit another user's blog post just by changing the URL's ID.
Ready to try it?
Create a free account and try "Fix an Unauthorized Update Missing a Policy Check" free for 7 days, no card required. Earn 120 XP and track your internship progress.