top of page
< Back

Mass Assignment

Mass Assignment occurs when APIs automatically bind user input to internal object properties, allowing attackers to modify restricted fields like roles, permissions, or financial data.

Object Fields Submitted → API Processes Input → Unrestricted Fields Modified → Sensitive Data Changed → Field Validation Applied

bottom of page