PoC and Patching - Validation Logic Disparity

I am trapped in this place and have no clue at all