Web Mass Assignment

• some parameter that is not explicitly seen in the request but affects the app
• eg: when we create a user, in the response we see a parameter active: False which wasnt present in the request
• next time when we create a user, we add that parameter and set to True.
• 

---

Exploitation

• read the source code of an application to try to bypass the logic.

---

Prevention

•