Mining REST APIs for Potential Mass Assignment Vulnerabilities
<|reference_start|>Mining REST APIs for Potential Mass Assignment Vulnerabilities: REST APIs have a pivotal role in accessing protected resources. Despite the availability of security testing tools, mass assignment vulnerabilities are common in REST APIs, leading to unauthorized manipulation of sensitive data. We propose a lightweight approach to mine the REST API specifications and identify operations and attributes that are prone to mass assignment. We conducted a preliminary study on 100 APIs and found 25 prone to this vulnerability. We confirmed nine real vulnerable operations in six APIs.<|reference_end|>
@article{mazidi2024mining,
    title={Mining REST APIs for Potential Mass Assignment Vulnerabilities},
    author={Arash Mazidi, Davide Corradini, Mohammad Ghafari},
    journal={arXiv preprint arXiv:2405.01111},
    year={2024},
    doi={10.1145/3661167.3661204},
    archivePrefix={arXiv},
    eprint={2405.01111},
    primaryClass={cs.CR}
}