WebGoat — Missing Function Level Access Control (page 4)

• Version: 8.2.3-SNAPSHOT

page 4

Previously, in page 2 or 3, you found /access-control/users, /access-control/users-admin-fix, /access-control/config

Don’t know if your Jerry’s account is admin, but the hash you look for is in /users-admin-fix. (Big Hint.)