Notes

Accessibility information
This page has four areas: Information about the challenge with a radiogroup of options to select as answer, a tree view “File Explorer” containing the project files, a “Code blocks” section with a list of code blocks relevant to the challenge, and a code viewer section. The code viewer section has tabs displaying opened files, with the currently opened file presented in a table. This table has three columns: Code block indicator (only present on the first line of a code block), line number, and the code itself. Each line of code within a code block is prefixed with ‘CBX’, where X is a number used to distinguish between code blocks. Opening category information, hints or submit buttons will open a modal dialog.

Skip to Code Editor
Identify the vulnerability
Fix the vulnerability
Identify the vulnerability
Identify the type of vulnerability present in the code. Code blocks that are vulnerable are marked with warning icons (). Additional code blocks that may give context may be marked with lightbulb icons ().

Select Vulnerability Category
Access Control

Missing Function Level Access Control

Denial of Service

Regular Expression DoS

Memory Corruption

Race Conditions

Server-Side Request Forgery

Server-Side Request Forgery (SSRF)

Actions
Attempts left: 1

View shortcuts keyboard hotkey:?

File Explorer
Highlighted files only: 85 files hidden


Controllers1 code blocks
AccountController.cs1 code blocks
1
Code blocks
AccountController.cs:38-40
using ArticlesAggregator.Models;
using ProductsCatalog.Models.Account;
using ProductsCatalog.Services;
using ProductsCatalog.Services.Authorization;
using System.Threading.Tasks;
using System.Web.Http;

namespace ProductsCatalog.Controllers
{

public class AccountController : CustomApiController
{
private readonly UserManager userManager = new UserManager();
private readonly RoleManager roleManager = new RoleManager();

[HttpPost]
public Task<IHttpActionResult> ChangePassword(ChangePasswordModel model) =>
Ok(this.userManager.TryChangePassword(model));

[HttpDelete, Authorize]
public Task<IHttpActionResult> Delete() =>
Ok(this.userManager.Delete(UserManager.UserId));

[HttpPost]
public Task<IHttpActionResult> DeleteById(DeleteUserModel model) =>
Ok(this.userManager.Delete(model.UserId));

[HttpPost, AllowAnonymous]
public async Task<IHttpActionResult> Register(RegisterModel model)
{
if (await this.userManager.UserNameExists(model.UserName) ||
await this.userManager.UserEmailExists(model.Email))
return BadRequest("User is already registered");

var userId = await this.userManager.Create(model);
return Ok(userId);
}

[HttpPost]
public Task<IHttpActionResult> AddToRole(AddToRoleModel model) =>
Ok(this.roleManager.AddRole(model.UserId, model.Role));

[HttpPost]
public Task<IHttpActionResult> RemoveFromRole(RemoveFromRoleModel model) =>
Ok(this.roleManager.RemoveRole(model.UserId, model.Role));

[HttpPost, Authorize]
public async Task<IHttpActionResult> ResetPassword(ResetPasswordModel model) =>
await this.userManager.ResetPassword(model)
? Ok("Your password has been changed successfully") as IHttpActionResult
: BadRequest("An error occurred while the password reset. " +
"Please contact the administrator.");

[HttpPost, AllowAnonymous]
public async Task<IHttpActionResult> RestorePassword(RestorePasswordModel model) =>
await this.userManager.RestorePassword(model);

return Ok(new ControllerResultMessage(
"If the email you provided is registered, you should receive a message with a reset token. " +
"Use this token to reset your password by calling the ResetPassword action."));
}
}