writeups.xyz / Exploiting GitHub Actions on open source projects

Submitter : c2a

Date: 26 July 2022

Bounty : undisclosed

Vulnerabilities :

• RCE

Programs :

• Elastic

Authors :

• Rojan Rijal (@Uraniumhacker)
• Johnny Nipper (@Ratherbeonline)
• Tanner Emek (@Itscachemoney)

Link :
https://medium.com/tinder/exploiting-github-actions-on-open-source-projects-5d93936d189f