writeups.xyz / Privileged account creation via Mass Assignment towards a full compromise using a Stored XSS

Submitter : c2a

Date: 26 April 2022

Bounty : undisclosed

Vulnerabilities :

• Stored XSS
• Mass Assignment
• Security Code Review

Programs :

• Pass Culture

Authors :

• Aethlios (@AethliosIK)

Link :
https://www.aeth.cc/public/Article-Pass-Culture/mass-assignment-article-en.html