News for hackers. Stuff that matters.

helaan

helaan on Hacker News

Re:Parsing JSON is a Minefield on Sunday April 22, 2018 @03:09PM (#16897916)
Reminds me of last years CouchDB bug (CVE-2017-12635) which was caused by two JSON parsers disagreeing on duplicate keys: here it was possible to add a second key with user roles, allowing a user to give admin rights to itself. JSON parser issues are real.