Attack on Node.js through JavaScript Object Prototype Manipulation
Researchers from the Helmholtz Center for Information Security (CISPA) and the Royal Institute of Technology in Sweden analyzed the applicability of prototype pollution techniques for creating attacks on the Node.js platform and popular applications based on it, leading to code execution. The prototype pollution method leverages a feature of JavaScript that allows new properties to be added to the root prototype of any object. In applications […]
