Severity: critical
Category: vulnerability
Triage Status: new
Validation: Human: unvalidated | LLM: valid
Description
The API endpoint /api/users/{id} does not validate that the authenticated user has permission to access the requested user ID. An attacker can enumerate and access other users data by changing the ID parameter.
Proof of Concept
- Login as user with ID 123
- Request GET /api/users/456
- Receive full user data for user 456 without authorization check
Vulnerable Code
File: src/api/users.controller.ts:45
async getUser(@Param("id") id: string) { return this.userService.findById(id); }
Metadata
- Finding ID: 750e8400-e29b-41d4-a716-446655440101
- Found By: hacktron_security_agent
- Validated By: hacktron_llm_validator
- Duplicate Of: N/A
- Reported At: 2025-12-03T16:51:44.000Z
This issue was automatically created by Hacktron security scanning.
Severity: critical
Category: vulnerability
Triage Status: new
Validation: Human: unvalidated | LLM: valid
Description
The API endpoint /api/users/{id} does not validate that the authenticated user has permission to access the requested user ID. An attacker can enumerate and access other users data by changing the ID parameter.
Proof of Concept
Vulnerable Code
File:
src/api/users.controller.ts:45Metadata
This issue was automatically created by Hacktron security scanning.