writeups.xyz / Compromising ByteDance’s Rspack using GitHub Actions Vulnerabilities

Submitter : c2a

Date: 31 May 2024

Bounty : undisclosed

Vulnerabilities :

• CI/CD
• Pwn Request

Programs :

• ByteDance (Rspack)

Authors :

• Adam Crosser
• John Stawinski

Link :
https://www.praetorian.com/blog/compromising-bytedances-rspack-github-actions-vulnerabilities/