Vulnerability Is Not Fixed (Broken Access Control | Improper Access Control)
This article provides instructions on how to resolve "vulnerability is not fixed" error.
Error:
The broken access control vulnerability has not been fixed.
Test
Sign in to SocialJourney using the email "maddieelyse@email.com" and password "monkey1".
Submit a post as Maddie Elyse ensuring intercept requests is toggled on, change the api/post/1 in the request header to api/post/2 and verify that the post wasn’t posted as another user.