writeups.xyz / Send()-ing Myself Belated Christmas Gifts - GitHub.com's Environment Variables & GHES Shell

Submitter : c2a

Date: 6 May 2024

Bounty : undisclosed

Vulnerabilities :

• RCE
• Unsafe Reflection
• Security Code Review

Programs :

• GitHub

Authors :

• Ngo Wei Lin (@Creastery)

Link :
https://starlabs.sg/blog/2024/04-sending-myself-github-com-environment-variables-and-ghes-shell/