writeups.xyz / Securing Developer Tools: OneDev Remote Code Execution

Submitter : c2a

Date: 20 September 2022

Bounty : undisclosed

Vulnerabilities :

• RCE
• SSRF
• Broken Access Control
• Container Escape

Programs :

• OneDev

Authors :

• Paul Gerste

Link :
https://blog.sonarsource.com/onedev-remote-code-execution/