writeups.xyz / Messing with GitHub's fork collaboration for fun and profit

Submitter : c2a

Date: 10 March 2021

Bounty : 30,000

Vulnerabilities :

• Broken Access Control

Programs :

• GitHub

Authors :

• Teddy Katz (@Not_aardvark)

Link :
https://blog.teddykatz.com/2021/03/10/fork-collab-abuse.html