You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
|🔴 **Critical**|**Privilege Escalation**| The system must prevent a standard user from changing their profile to `administrador: true`. | The `PUT /usuarios/{id}` endpoint allows the change, promoting the user to administrator. |
155
-
|🔵 **Low**|**Response Inconsistency (Empty Payload)**| Return a standardized validation error (`400`) on all routes when receiving `{}`. | Returns `400` on public routes and `401` on private routes for the same payload. |
154
+
|**(!) Critical**|**Privilege Escalation**| The system must prevent a standard user from changing their profile to `administrador: true`. | The `PUT /usuarios/{id}` endpoint allows the change, promoting the user to administrator. |
155
+
|**(-) Low**|**Response Inconsistency (Empty Payload)**| Return a standardized validation error (`400`) on all routes when receiving `{}`. | Returns `400` on public routes and `401` on private routes for the same payload. |
0 commit comments