Lucene search
+L

1 matches found

Code423n4
Code423n4
added 2021/05/01 12:00 a.m.11 views

Beebots.randomIndex() Can Be Manipulated To Not Be Random Without Costing Alice Anything

Handle jvaqa Vulnerability details Impact Beebots.randomIndex Can Be Manipulated To Not Be Random Without Costing Alice Anything. Since lower-numbered ids are seemingly more valuable, a malicious attacker can manipulate randomIndex to give themselves a more desirable value at no cost to themselve...

6.7AI score
SaveExploits0
Rows per page
Query Builder