writeups.xyz / Stealing arbitrary GitHub Actions secrets

Submitter : c2a

Date: 17 March 2021

Bounty : 25,000

Vulnerabilities :

• Logic Flaw

Programs :

• GitHub

Authors :

• Teddy Katz (@Not_aardvark)

Link :
https://blog.teddykatz.com/2021/03/17/github-actions-write-access.html