Actions
Copy link

Support #3093

open

Improper Input Validation Allows Modification of Restricted User Parameters

Added by Sall Sokkheng 22 days ago. Updated 1 day ago.

Status:
Testing
Priority:
Normal
Assignee:
Sall Sokkheng
Start date:
06/24/2026
Due date:
06/25/2026 (19 days late)
% Done:

100%

Estimated time:
Tester:
Testing Percentages:
100%

Description

Restricted profile fields can be modified by tampering with the request, indicating missing server-side validation and authorization checks. This allows unauthorized changes to protected user information.

Related issues 2 (2 open — 0 closed)

Copied from Support #3092: Unrestricted File Extension UploadNewSall Sokkheng06/23/202606/24/2026

Actions
Copied to Support #3094: Potential IDOR – Unauthorized Modification of Internal Business Pairing DataCompletedSall Sokkheng06/25/202606/26/2026

Actions
Actions
Copy link
 #1

Updated by Sall Sokkheng 22 days ago

  • Copied from Support #3092: Unrestricted File Extension Upload added
Actions
Copy link
 #2

Updated by Sall Sokkheng 22 days ago

  • Copied to Support #3094: Potential IDOR – Unauthorized Modification of Internal Business Pairing Data added
Actions
Copy link
 #3

Updated by Sall Sokkheng 15 days ago

  • Status changed from New to Testing
  • % Done changed from 0 to 80
Actions
Copy link
 #4

Updated by Sall Sokkheng 1 day ago

  • Testing Percentages changed from 0% to 100%
Actions
Copy link
 #5

Updated by Sall Sokkheng 1 day ago

  • % Done changed from 80 to 100
Actions
Copy link

Also available in: Atom PDF