writeups.xyz / RoguePuppet – A Critical Puppet Forge Supply Chain Vulnerability

Submitter : c2a

Date: 2 July 2024

Bounty : undisclosed

Vulnerabilities :

• CI/CD
• Supply Chain Attack

Programs :

• Puppet Labs

Authors :

• Adnan Khan (@Adnanthekhan)

Link :
https://adnanthekhan.com/2024/07/02/roguepuppet-a-critical-puppet-forge-supply-chain-vulnerability/