the next bug or vulnerability that we're going to cover is broken access control.
According to the OaS top 10 list.
This is the most common security threat out there with 94% of the
websites tested being vulnerable to some sort of a broken access control.
Broken access control is actually a really large category
that contains a number of subcategories such as path,
traversal vulnerabilities, C S R F I door and much more.
It's basically a general term that encapsulates any bug or vulnerability that
allows you to access or modify data beyond your limits or permissions.
A simple example would be to be able to access
or modify data that does not belong to you.
That belongs to a different user
platforms like Uber
and Shopify were vulnerable to such
vulnerabilities and they paid anything between 500
tens of thousands of dollars to the hunters that discovered such vulnerabilities.
Obviously the amount of bounty depended on the impact and the severity of the bug.