Skip to content
Dojo challenge #47 APICrash solution
yeswehack.com | blog | #appsec | #ctf | #web-security | #information-disclosure | #graphql | #dojo | #yeswehack | #race-condition
Summary
Dojo #47: a race condition in a threaded TinyDB update inside a GraphQL backend triggers errors whose messages leak the flag — a classic information-exposure-through-error-message bug.
- Published
- Collected