Race_Contidtion.md

Race Condition

Table of Contents

• Limit Overrun
• Authentication Bypass

Limit Overrun

The count limit can be bypassed.

• Reusing a gift card multiple times

  • Hackerone report, Race Condition allows to redeem multiple times gift cards which leads to free "money"

• Receive one-time credits multiple times

  • Hackerone report, Race Condition in account survey

Authentication Bypass

Authentication can be bypassed.

• Bypassing email-based authentication
  • PortSwigger's research (by albinowax), Discovering a race condition vulnerability in Gitlab with the single-packet attack