Questions tagged [race-condition]
The race-condition tag has no usage guidance.
3
questions with no upvoted or accepted answers
2
votes
0
answers
388
views
What is the impact if there is Race Condition while submitting OTP?
I recently came across a web application where it was asking for an OTP after a successful login.
Let the endpoint be https://www.example.com/otpcode
The initial test for a brute-force of the OTP ...
- 197
1
vote
0
answers
82
views
Access default to true vulnerability
I remember there is a TOCTOU-related vulnerability, where one should never default the access of a user to true and set to false if something goes wrong, but default it to false and set it to true ...
- 113
0
votes
0
answers
27
views
Data integrity protection in Drupal 10.x - how lock conditions might fail
I was doing some pentesting on a Drupal 10.x application that some colleagues built; I have not reviewed the source code. The dynamic vulnerability scanner I use provoked some exceptions related to a ...
