Burp Suite User Forum

Create new post

Server-side prototype pollution materials

Filip | Last updated: Jun 10, 2024 07:06PM UTC

Hi, I am going over the materials on server-side prototype pollution, and I noticed a bug. Specifically, in the `Status code override` section and the code snippet showing the `createError` function. ``` if (!statuses.message[status] && (status > 400 || status >= 600))) { status = 500 } ``` Shouldn't this be status < 400?

Hannah, PortSwigger Agent | Last updated: Jun 11, 2024 10:35AM UTC

Hi Thanks for raising this with us! This is a typo, and we're in the process of getting this sorted. If you check out the research paper, it has it the correct way round: https://portswigger.net/research/server-side-prototype-pollution#status

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.