3 ms·
This vulnerability does not require the attacker to have execute permissions. It relies on the server decoding user-supplied JSON (which should be safe), and th
by ridiculous_fish 5y ago
This vulnerability does not require the attacker to have execute permissions. It relies on the server decoding user-supplied JSON (which should be safe), and then having a code path which assigns "through" those keys. Any sort of object-merge library is a candidate for being vulnerable.
- olliej 5y agoEven if you could initialize the prototype of an object from JSON deserialisation (which I’m not sure you can), JSON very explicitly lacks the ability to set accessor properties. So any injected property is still a normal property for which regular read and write rules apply