Actions
Copy link

Support #3093

open

Improper Input Validation Allows Modification of Restricted User Parameters

Added by Sall Sokkheng 22 days ago. Updated 1 day ago.

Status:
Testing
Priority:
Normal
Assignee:
Sall Sokkheng
Start date:
06/24/2026
Due date:
06/25/2026 (19 days late)
% Done:

100%

Estimated time:
Tester:
Testing Percentages:
100%

Description

Restricted profile fields can be modified by tampering with the request, indicating missing server-side validation and authorization checks. This allows unauthorized changes to protected user information.

Related issues 2 (2 open — 0 closed)

Copied from Support #3092: Unrestricted File Extension UploadNewSall Sokkheng06/23/202606/24/2026

Actions
Copied to Support #3094: Potential IDOR – Unauthorized Modification of Internal Business Pairing DataCompletedSall Sokkheng06/25/202606/26/2026

Actions
Actions
Copy link

Also available in: Atom PDF