Episode 195 - 2022 CVEs, CORS, GraphQL
from Absolute AppSec
Ken (@cktricky) and Seth (@sethlaw) take a step away from the news to review technical articles and research released in the last couple of weeks. This includes analysis done by Jerry Gamblin on total CVEs released during 2022, a new tool for exploiting weak CORS configurations, an excellent writeup on usage along with an intentionally-vulnerable GraphQL application, and finally some thoughts on prototype pollution style vulnerabilities in other interpreted languages (specifically python).
Embed this episode
No transcript yet.
Frequently asked questions
When was this Absolute AppSec episode published?
This episode was published on January 17, 2023.
Can I download this Absolute AppSec episode?
Yes. Use the download control on the episode player to save the publisher-provided media file.