PWPA
TCM Security Practical Web Pentest Associate (PWPA)
Authorization FlawsEnglish
Exam overviewPractice session
During a Burp Suite intercept session you notice the request: `GET /api/users/1234/profile`. You change `1234` to `1235` and receive another user's profile data. What vulnerability is this?
Loading your practice session…