Skip to content
ביקורת אבטחה
חזרה ללוח
D87אומת בקודP2

`ajax_seat_state` block() insert has no availability guard

B · unauth-POSTS3 · destructiveCORT1
תיקון
85%
מורכבות medium

A seat-block insert has no availability guard, allowing conflicting seat states.

Seater.php:92

תיק מלא
ממצאים קשורים
D48 · Seat reservation race (read-check-wri…D15 · `lcf_seater` engine table: no schema-…D45 · `ajax_seat_state` lets an anonymous u…D46 · `ajax_reassign_seat` has no capabilit…D13 · God-router: no nonce + no capability …