Asura Hunt

The challenge

Audit this intentionally vulnerable snippet without executing it.

function account(req, db) {
  const user = db.query("SELECT * FROM users WHERE id=" + req.query.id);
  return { user, token: process.env.ADMIN_TOKEN };
}
// No authentication or authorization middleware.