writeups.xyz / GitHub Pages - Multiple RCEs via insecure Kramdown configuration - $25,000 Bounty

Submitter : c2a

Date: 20 October 2020

Bounty : 25,000

Vulnerabilities :

• RCE
• Path Traversal

Programs :

• GitHub

Authors :

• William Bowling / Vakzz (@Wcbowling)

Link :
https://devcraft.io/2020/10/20/github-pages-multiple-rces-via-kramdown-config.html