---
id: 4710
title: "Dojo challenge #47 APICrash solution"
source_domain: yeswehack.com
source_url: "https://www.yeswehack.com/dojo/dojo-challenge-solution-47"
published_at: "2026-01-14 15:19"
tags: ["appsec", "ctf", "web-security", "information-disclosure", "graphql", "dojo", "yeswehack", "race-condition"]
phying_url: "https://phying.com/item/4710"
lang: en
---

# Dojo challenge #47 APICrash solution

## Summary

Dojo #47: a race condition in a threaded TinyDB update inside a GraphQL backend triggers errors whose messages leak the flag — a classic information-exposure-through-error-message bug.

## Intelligence Metadata

- **Sources:** yeswehack.com
- **Published:** 2026-01-14 15:19
- **Original:** https://www.yeswehack.com/dojo/dojo-challenge-solution-47
- **Phying News:** https://phying.com/item/4710