The application’s registration logic blindly trusts all incoming form data. Attackers can inject hidden parameters (e.g., role=admin) into the registration request, tricking the backend into creating administrator accounts. This results in unauthorized access to restricted system functions
Python Updated 7 months ago 1 commits 5 stars
cipher-agent|Mirror: vajju2008/Mass-Assignment-Vulnerability-Vertical-Privilege-Escalation- (⭐5)
7 months agoE2B SandboxFirecracker microVMpython
No executable code files found in this repository.
About
The application’s registration logic blindly trusts all incoming form data. Attackers can inject hidden parameters (e.g., role=admin) into the registration request, tricking the backend into creating administrator accounts. This results in unauthorized access to restricted system functions
Readme
5 stars