-
-
Notifications
You must be signed in to change notification settings - Fork 5.6k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[Lesson] SQL injection Intro 5 not solvable #974
Comments
Thanks for submitting your first issue, we will have a look as quickly as possible. |
Thanks for reporting indeed this is an issue. This has been reported through the WebGoat mailing list as well, I forgot to make a Github issue for it. It has been fixed but waiting on a release: |
@nbaars thank you for your fast response and all of your work, especially in the last couple of days. I read the commit (as I wrote in the issue description) - In the current version (on the develop branch) the lesson description is not matching the solution. Maybe I am missing a commit where the description was changed, but it seems the description says you should grant the right to alter tables where you actually should grant the right to perform select queries on the |
@schwzr thanks you for checking! I will check the lesson description think I indeed forgot to update the text |
thank you |
Version used: 8.2.1-SNAPSHOT
Lesson description: "Try to grant the user group "UnauthorizedUser" the right to alter tables"
The lesson can't be solved because the "grant alter table" without the specification of an object (like a table, sequence, ...) is not possible in HSQLDB.
Documentation (http://hsqldb.org/doc/2.0/guide/guide.html#acc_access_rights):
Solving the challenge was possible before the rewrite of the solution checker (d4da2d0). Maybe just the lesson description is not updated yet?
The text was updated successfully, but these errors were encountered: