HTB CWES
HTB Certified Web Exploitation Specialist (CWES)
Web Api AttacksEnglish
Exam overviewPractice session
When testing a REST API endpoint for authorization issues, an attacker changes the resource ID in the URL from their own user ID to another user's ID and successfully retrieves that user's data. This is an example of which vulnerability?
Loading your practice session…