Vulnerability
vulnerability:house_ownership_validation_flaw
Failure to validate that the requester owns the house identified in a deletion request.
Failure to validate that the requester owns the house identified in a deletion request.
“the server doesn’t check if you’re the owner of this house”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | EXPLOITS | house deletion exploit | Derived | 8 |
house deletion exploit EXPLOITS house ownership validation flaw
The house-deletion exploit worked because the server did not properly verify that the sender owned the targeted house.
Derived Confidence 98% · Manfred EP 8 Details
“the server doesn’t check if you’re the owner of this house when you send the delete packet”