Security issue on mutations
Nobody has claimed this yet.
Assessment
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Newbie friendliness
- 52/100
- Issue type
- Bug
- Clarity
- Mostly clear
- Activity status
- Quiet
- Tech stack
- javascript
- Domain
- api, authorization, security
Research direction
Start by locating the mutations that resend emails or change passwords and trace how the requester and target user IDs are handled. Confirm the intended behavior for mismatched IDs, then verify that those mutations deny the request while same-user requests continue to work; the issue names no files or tests.
Written by the indexing model from the issue text.
Description
Mutations of resend emails or passwords should ne denied if the user id is not equal to the requester id, it could be an easy check inside each mutations but I think there's a smarter way to do it
- Dominant language
- JavaScript
- Stars
- 5
- Forks
- 2
- PR merge metrics
- No merged PRs in 30d
Getting set up
- Ships a Dockerfile or Docker Compose file
- No pull request template
- No contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Similar issues
-
area:ui bug effort:low incomplete model:light plan planner:gpt-6-1-sol
Difficulty 2/5 1-3 hours Newbie friendliness 85/100
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
Maintainers usually reply within 1 day
-
documentation good first issue hacktoberfest size/small type/docs up-for-grabs
Difficulty 2/5 1-3 hours Newbie friendliness 88/100
Redo-San/RedoSan-Authenticity#511 ·
Maintainers usually reply within 1 day
-
help wanted python v9 cert scope: curriculum
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
freeCodeCamp/freeCodeCamp#70604 ·
Maintainers usually reply within 1 day
-
type: bug
Difficulty 2/5 1-3 hours Newbie friendliness 74/100
RocketChat/Rocket.Chat#42543 · 2 comments ·
Maintainers usually reply within 1 day