From prototype pollution to RCE in a Node.js template engine
Getting to code execution took eleven attempts. We wrote up the failed ones as well, since they show where the engine is actually hardened.
The full write-up for this one isn't online yet.
Getting to code execution took eleven attempts. We wrote up the failed ones as well, since they show where the engine is actually hardened.
The full write-up for this one isn't online yet.