Glossary

Mass Assignment

A vulnerability that allows an attacker to modify object fields that should not be accessible by adding unexpected parameters to the request. Mass assignment can enable privilege escalation (adding an admin role) or modification of sensitive data. Common in frameworks like Laravel, Rails, and Django.

Related Pages

Other Terms

Need an external review of your HR SaaS?

Share your product, stack, and client context. We will come back with the right review scope.

Discuss your audit