Interview questions
Security, auth & multi-tenancyEasySDE-1

A penetration test finds that changing /api/orders/10452 to /api/orders/10453 shows another user's order. What is this vulnerability and how do you fix it properly?

Asked at
AmazonSwiggyZomato

Think first

Answer out loud as you would in the room — clarify, give numbers, name the trade-off — then compare with the model answer.

Saved on this device. Create a free account to keep it on every device.

Practise this with Sam

A real mock interview, out loud, with an honest scorecard. Free to start.

Start free