Find mass assignment in strongly-typed frameworks
Binders that map the whole request to a model let attackers set fields the form never exposed, like role or price.
Tag: mass-assignment
Review Ruby for send, YAML.load, and mass assignment
Dynamic send on user input, YAML or Marshal load, and permit! are the highest-yield Ruby and Rails findings.
Mass assignment to escalate your own role
Endpoints that bind the whole request body to a model often accept fields the UI never sends, like role or isAdmin.