No workaround is possible for this vulnerability except to avoid data binding altogether????!!
m
Matthew Moss
12/21/2023, 4:08 PM
Unfortunately, that is correct.
Matthew Moss
12/21/2023, 4:14 PM
More specifically, avoid data binding against incoming request parameters (i.e. the attack vector). Granted, that is likely the heaviest use of data binding, so still unfortunate.