Abstract: Business-logic vulnerabilities (BLVs) exploit flaws in an application's intended workflow-quota checks, state transitions, privilege boundaries-that lie far above the syntactic layer ...