writeups.xyz / Bad.Build: A Critical Privilege Escalation Design Flaw in Google Cloud Build Enables a Supply Chain Attack

Submitter : c2a

Date: 18 July 2023

Bounty : undisclosed

Vulnerabilities :

• Cloud
• Privilege Escalation

Programs :

• Google

Authors :

• Roi Nisimi (@Roinisimi)

Link :
https://orca.security/resources/blog/bad-build-google-cloud-build-potential-supply-chain-attack-vulnerability/