writeups.xyz / "A tale of making internet pollution free" - Exploiting Client-Side Prototype Pollution in the wild

Submitter : c2a

Date: 28 September 2021

Bounty : 12,600

Vulnerabilities :

• Prototype Pollution
• XSS

Programs :

• Apple
• Atlassian
• Mozilla
• HubSpot
• Segment Analytics

Authors :

• Sergey Bobrov (@Black2fan)
• S1r1us (@S1r1u5_)
• Terjanq (@Terjanq)
• Beomjin Lee (@Po6ix)
• Masato Kinugawa (@Kinugawamasato)
• Nikita Stupin (@_Nikitastupin)
• Rahul Maini (@Iamnoooob)
• Harsh Jaiswal (@Rootxharsh)
• Mikhail Egorov (@0ang3el)
• Melar Dev (@Melardev)

Link :
https://blog.s1r1us.ninja/research/PP