#Improper Enforcement

1 post

BugForge - Daily - Cheesy Does It (Jul 13, 2026)

The Cheesy Does It reorder endpoint re-applies a client-supplied coupon without re-checking its one-per-customer limit, letting the single-use FOUNDERS20 promo be redeemed again and again to disclose the flag.

Business Logic Coupon Reuse Improper Enforcement Single Use Bypass Parameter Injection Price Manipulation

Posted on 2026-07-13 20:00 5 min read