writeups.xyz / When you're so bored, you start debugging someone else's code: bug hunting in a random Cloud-Native project

Submitter : c2a

Date: 3 May 2023

Bounty : undisclosed

Vulnerabilities :

• SSTI
• RCE

Programs :

• Foreman

Authors :

• ONSEC.io Research Team

Link :
https://blog.onsec.io/when-youre-so-bored-you-start-debugging-someone-elses-code/