writeups.xyz / Anyone can Access Deleted and Private Repository Data on GitHub

Submitter : c2a

Date: 24 July 2024

Bounty : undisclosed

Vulnerabilities :

• Cross Fork Object Reference (CFOR)

Programs :

• GitHub

Authors :

• Joe Leon (@JoeLeonJr)

Link :
https://trufflesecurity.com/blog/anyone-can-access-deleted-and-private-repo-data-github