writeups.xyz / Mining Node.js Vulnerabilities via Object Dependence Graph and Query

Submitter : c2a

Date: 10 August 2022

Bounty : undisclosed

Vulnerabilities :

• RCE
• OS Command Injection
• Prototype Pollution
• Path Traversal

Programs :

• Undisclosed

Authors :

• Song Li
• Mingqing Kang
• Jianwei Hou
• Yinzhi Cao

Link :
https://www.usenix.org/conference/usenixsecurity22/presentation/li-song