Property-level issues occur when a user may change fields they should not: role, ownerId, price, isAdmin, or internal status flags. The route may be allowed for the user, and the object ID may even be theirs, but the update must still restrict which properties are legal for that role and operation.
Property-level
Unauthorized modification of object fields through APIs: mass assignment, overposting, and filter bypasses on which columns may change.
1분 분량2026년 10월 6일 업데이트
기여자 1명
기여자 1명이 콘텐츠는 한국어에서 사용할 수 없어 영어로 표시됩니다.