writeups.xyz / Command Injection in the GitHub Pages Build Pipeline

Submitter : c2a

Date: 25 August 2022

Bounty : 4,000

Vulnerabilities :

• RCE
• OS Command Injection

Programs :

• GitHub

Authors :

• Joren Vrancken

Link :
https://blog.nietaanraken.nl/posts/github-pages-command-injection/