writeups.xyz / Hijacking GitHub Runners To Compromise The Organization

Submitter : c2a

Date: 22 May 2024

Bounty : undisclosed

Vulnerabilities :

• CI/CD
• Privilege Escalation

Programs :

• Undisclosed

Authors :

• Hugo Vincent (@Hugow_vincent)

Link :
https://www.synacktiv.com/publications/hijacking-github-runners-to-compromise-the-organization.html