C

Authentication Flaws

Broken auth, sessions, JWT pitfalls, and IDOR.