writeups.xyz / Azure Devops Zero-Click CI/CD Vulnerability

Submitter : c2a

Date: 31 January 2024

Bounty : undisclosed

Vulnerabilities :

• CI/CD
• Supply Chain Attack
• Privilege Escalation
• Information Disclosure

Programs :

• Microsoft (Azure DevOps Pipelines)

Authors :

• Nadav Noy

Link :
https://www.legitsecurity.com/blog/azure-devops-zero-click-ci/cd-vulnerability