Manipulation of exam results at Semrush.Academy

Summary

The researcher was able to bypass the exam process. By replacing the exam results with the correct ones, as the body of the request was JSON. After sending the request with the correct results, the researcher received a certificate.

Hi. In this situation, it was possible to bypass the exam process. That is to replace the results of the exam with the correct ones and send a request to get the certificate right away. And to replace the results with the correct ones turned out, because the body of the request was json, where 1 = true, and empty = false.

Steps To Reproduce:

1. Finished exams with any answers
2. Retake exam
3. Send the last request of our answer

Example body: {"answers":{"503":"","504":"","505":"1","506":"","507":"","591":"1","592":"","593":"","594":"","595":"","596":"","1340":"1","1341":"","1342":"","1343":"","1344":"","1345":"","1351":"1","1352":"","1353":"","1354":"","1355":"","1356":"","1357":"","1358":"1","1359":"","1360":"","1361":"","1362":"","1363":"","1365":"1"}}