A Flask product administration panel. The /dashboard and delete actions are meant for local users only, and the application decides what is local from the Host header.
Not startedDockercommit 0a73d0ex86_64 · aarch64Secret
Reach the local-only administration panel and delete a product without logging in, by tampering with the Host header.
The brief for this lab lives in its repository.