Undefined-oriented Programming: Detecting and Chaining Prototype Pollution Gadgets in Node.js Template Engines for Malicious Consequences.

Zhengyu Liu, Kecheng An, Yinzhi Cao

Browse the full SP paper archive.