BiteSizedChunks.comLearn one small thing at a time.

Course contentsShow

990REST API Attack Surface and Reconnaissance
991Broken Object Level Authorization in REST APIs
992Broken Function Level Authorization
993Mass Assignment Vulnerabilities in REST APIs
994Excessive Data Exposure in API Responses
995API Parameter Pollution and Injection
996HTTP Method Tampering and Verb Confusion
997Content-Type and Accept Header Exploits
998API Versioning and Legacy Endpoint Vulnerabilities
999GraphQL Architecture and Security Implications
1000GraphQL Introspection and Information Disclosure

990REST API Attack Surface and Reconnaissance
991Broken Object Level Authorization in REST APIs
992Broken Function Level Authorization
993Mass Assignment Vulnerabilities in REST APIs
994Excessive Data Exposure in API Responses
995API Parameter Pollution and Injection
996HTTP Method Tampering and Verb Confusion
997Content-Type and Accept Header Exploits
998API Versioning and Legacy Endpoint Vulnerabilities
999GraphQL Architecture and Security Implications
1000GraphQL Introspection and Information Disclosure

Lesson 993 of 3,052·21. Web Security - API SecurityPro lesson

Mass Assignment Vulnerabilities in REST APIs

Manipulate object properties by injecting unexpected parameters that map to internal model attributes or sensitive fields.

This lesson is for subscribers

You've completed the free preview. Subscribe to unlock every lesson in every course.

See pricing Back to course