writeups.xyz / Google & Apache Found Vulnerable to GitHub Environment Injection

Submitter : c2a

Date: 1 September 2022

Bounty : undisclosed

Vulnerabilities :

• Privilege Escalation
• CI/CD

Programs :

• Google
• Apache

Authors :

• Noam Dotan

Link :
https://www.legitsecurity.com/blog/github-privilege-escalation-vulnerability-0