Lucene search

K
huntrAhmedvienna59FE5037-B253-4B0F-BE69-1D2E4AF8B4A9
HistoryJul 13, 2023 - 8:47 p.m.

Business Logic Error - letting the Name Field blank

2023-07-1320:47:28
ahmedvienna
www.huntr.dev
5
business logic
username
bypass

0.0004 Low

EPSS

Percentile

13.3%

Hello,

I was able to bypass the restriction for setting an admin username and letting the username via spaces blank.

Let’s have a look.

As you can see the name is with a red star and therefore required to be filled.

Now we will add2 spaces and let the username blank and save.

As you can see all the names have been left blank.

Thank you for your time.

0.0004 Low

EPSS

Percentile

13.3%

Related for 59FE5037-B253-4B0F-BE69-1D2E4AF8B4A9