---
id: 2789
title: "How to Catch Broken Access Control Security Vulnerabilities in Code Review Part 2"
source_domain: hackerone.com
source_url: "https://www.hackerone.com/blog/how-catch-broken-access-control-security-vulnerabilities-code-review-part-2"
published_at: "2022-01-05T00:00:00Z"
tags: ["access-control", "code-review", "privilege-escalation", "secure-coding", "web-security", "jwt", "owasp", "broken-access-control", "cors"]
phying_url: "https://phying.com/item/2789"
lang: en
---

# How to Catch Broken Access Control Security Vulnerabilities in Code Review Part 2

## Summary

Part 2 of the series covers the rest of OWASP broken access control: privilege escalation, insecure user impersonation, JWT and cookie tampering, CORS misconfiguration, and force browsing.

## Intelligence Metadata

- **Sources:** hackerone.com
- **Published:** 2022-01-05T00:00:00Z
- **Original:** https://www.hackerone.com/blog/how-catch-broken-access-control-security-vulnerabilities-code-review-part-2
- **Phying News:** https://phying.com/item/2789