thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Intermediate

Business Logic Vulnerability

A flaw in the design or workflow of an application that allows misuse of legitimate functionality.

Definition

Logic flaws include skipping workflow steps, applying discounts repeatedly, negative quantities, or exploiting race conditions in limits. Scanners rarely find them; threat modeling, abuse cases and manual testing do. Enforce workflow state and invariants server-side.

Example

Applying the same single-use coupon in parallel requests to get multiple discounts.

Exam tip

Automated scanners are poor at logic flaws; manual testing and design review find them.

Related terms