race condition on BBP

Hi I will share how I found race condition so let’s get started

In the program, you have limit only to add 10 products

the attack:
1- click to ADD PRODUCT and make Intercept on In burp suite

2- send the request to the repeater

3- in the repeater repeat the request multiple times (ctrl + r)

4- create a group and add all the repeat requests in the group

5- Send group in parallel ( single-packet attack )

attack done

the sad ending:

https://portswigger.net/web-security/race-conditions