writeups.xyz / Gain write permission of repositories with a bug in GitHub Actions

Submitter : c2a

Date: 2 April 2021

Bounty : 25,000

Vulnerabilities :

• Broken Access Control
• Logic Flaw

Programs :

• GitHub

Authors :

• Tyage (@Tyage)

Link :
https://blog.tyage.net/posts/2021-04-02-improper-access-control-github-workflow/