Enjin · Report #2682392
Race Condition on Create API Function
Validstatus
45upvotes
15 Oct 2024disclosed
Summary
@mo_salah12 was able to demonstrate a race condition that allowed user's to submit multiple requests within rapid succession to allow creating additional keys beyond the defined limit on the Enjin Platform Cloud service.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.