writeups.xyz / Vulnerable GitHub Actions Workflows Part 1: Privilege Escalation Inside Your CI/CD Pipeline

Submitter : c2a

Date: 4 April 2022

Bounty : undisclosed

Vulnerabilities :

• Privilege Escalation
• CI/CD

Programs :

• GitHub

Authors :

• Noam Dotan

Link :
https://www.legitsecurity.com/blog/github-privilege-escalation-vulnerability