Examkin

Soru

Zorluk: OrtaApplication and Software Vulnerabilities

A security auditor is examining backend service logs following an unauthorized access report on a cloud microservice. The auditor observes two distinct request patterns:

1. `GET /documents/download?path=../../../../etc/shadow` returning HTTP `200 OK` along with system credential hashes.
2. `PUT /api/v1/profile` with payload `{"username": "jdoe", "is_admin": true}` resulting in a regular user successfully assigning themselves administrator rights.

Based on these findings, which of the following software vulnerabilities are present in the application? (Select TWO.)

  1. Path traversalCevap
  2. Mass assignmentCevap
  3. C
    SQL injection
  4. D
    Buffer overflow

Cevap

The application exhibits path traversal (directory traversal) and mass assignment (auto-binding) vulnerabilities.
The first log entry demonstrates path traversal because directory navigation operators (`../`) were executed to retrieve system files outside the web root. The second log entry demonstrates mass assignment because client-controlled JSON key-value pairs were automatically bound to internal object properties (`is_admin`), resulting in unauthorized privilege escalation.

Adım Adım Çözüm

1
Analyze the first log indicator `GET /documents/download?path=../../../../etc/shadow`.
Identified path traversal sequence (`../`) allowing absolute directory escape to access sensitive OS files.
Input parameters are used directly in file system file-access APIs without proper path canonicalization or sanitization.
2
Analyze the second log indicator `PUT /api/v1/profile` with payload `{"username": "jdoe", "is_admin": true}`.
Identified mass assignment vulnerability where unmanaged HTTP parameter binding modifies protected object attributes.
Framework auto-binds request keys to internal data models without enforcing strict field allowlists.

Anahtar Kavram

Software Vulnerabilities and Logic Flaws (Path Traversal & Mass Assignment)
Bu soruyu puanla

Konular

Application and Software Vulnerabilities

Bu konudan daha fazla soru