Token Horizontal Privilege Escalation

Horizontal Privilege Escalation happen when a user can access another users resources. Usually this vulnerability is exploited by tampering with the user identifier in the token.

Remediation

Do not use easily guessable or public user identifier
Check the authenticated session is authorised to access a requested resource

Metadata

Severity: high
Slug: token-horizontal-privilege-escalation

CWEs

639: Authorization Bypass Through User-Controlled Key
266: Incorrect Privilege Assignment

OWASP

A01:2021: Broken Access Control
A04:2021: Insecure Design
A07:2021: Identification and Authentication Failures

Available Labs

Select a language to explore available labs for this vulnerability.

1 Lab

Csharp Labs

Csharp 1 lab

Explore 1 lab in Csharp.

1 Lab

Go Labs

Go 1 lab

Explore 1 lab in Go.

1 Lab

Java Labs

Java 1 lab

Explore 1 lab in Java.

1 Lab

Javascript Labs

Javascript 1 lab

Explore 1 lab in Javascript.

2 Labs

Python Labs

Python 2 labs

Explore 2 labs in Python.

1 Lab

Ruby Labs

Ruby 1 lab

Explore 1 lab in Ruby.

1 Lab

Typescript Labs

Typescript 1 lab

Explore 1 lab in Typescript.

No matching labs found

Try adjusting your language filter.

Play AppSec WarGames

Want to skill-up in secure coding and AppSec? Try SecDim Wargames to learn how to find, hack and fix security vulnerabilities inspired by real-world incidents.

For Companies Play Now

Got a comment?

Join our secure coding and AppSec community. A discussion board to share and discuss all aspects of secure programming, AppSec, DevSecOps, fuzzing, cloudsec, AIsec code review, and more.