writeups.xyz / EJS - Server Side Prototype Pollution gadgets to RCE

Submitter : c2a

Date: 9 March 2023

Bounty : undisclosed

Vulnerabilities :

• Server-Side Prototype Pollution
• RCE
• Security Code Review

Programs :

• Node.js Third-Party Modules (EJS)

Authors :

• Mizu (@Kevin_mizu)

Link :
https://mizu.re/post/ejs-server-side-prototype-pollution-gadgets-to-rce