writeups.xyz / Attackers Can Bypass GitHub Required Reviewers to Submit Malicious Code

Submitter : c2a

Date: 8 September 2022

Bounty : undisclosed

Vulnerabilities :

• Broken Authorization
• Logic Flaw

Programs :

• GitHub

Authors :

• Noam Dotan

Link :
https://www.legitsecurity.com/blog/bypassing-github-required-reviewers-to-submit-malicious-code