A Flask comment board with registration and login on a MongoDB database running in the same container. The JSON body of the login and comment requests goes straight into MongoDB queries.
Not startedDockercommit 75db7a6x86_64 · aarch64Secret
Use MongoDB query operators in the JSON requests to log in as another user and to change comments you do not own (NoSQL injection).
The brief for this lab lives in its repository.