writeups.xyz / Breaking GitHub Private Pages for $35k

Submitter : c2a

Date: 4 April 2021

Bounty : 35,000

Vulnerabilities :

• XSS
• CRLF Injection
• Web Cache Poisoning

Programs :

• GitHub

Authors :

• Robert Chen (@NotDeGhost)
• Philip

Link :
https://robertchen.cc/blog/2021/04/03/github-pages-xss