Given the following code snippet: Of which of the following is this snippet an example?

The correct answer is D. Improper filed usage. A developer should never store important variables locally, since it can be tampered using a HTTP Interceptor (like Burp or OWASP ZAP). In this particular case, the attacker could modify price variable to zero, so that he wouldn't pay

Research, Development and Collaboration

Question

Given the following code snippet:

Of which of the following is this snippet an example?

Exhibit

Options

AData execution prevention
BBuffer overflow
CFailure to use standard libraries
DImproper filed usage
EInput validation

How the community answered

(27 responses)

B
15% (4)
C
7% (2)
D
74% (20)
E
4% (1)

Explanation

A developer should never store important variables locally, since it can be tampered using a HTTP Interceptor (like Burp or OWASP ZAP). In this particular case, the attacker could modify price variable to zero, so that he wouldn't pay

Topics

#code review#improper file usage#application security#vulnerability identification

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice