Back to home

Spot the Vuln

Weekly Puzzle

Read the snippet, click the line you think is vulnerable, and name the flaw. Then see exactly why it breaks and how to fix it. A fresh code-review puzzle drops every week.

0 / 1 cleared
STV-001

The Query That Trusts Its Sort Order

MediumJavaScript · Node / Express + Postgres

A product-search endpoint for an e-commerce backend. Shoppers can search by keyword and sort the results. The team is careful. Almost everything is parameterized. Find the one flaw an attacker can reach.

click the vulnerable line

What class of flaw is this?