[ tag ]

#rce

02 entries

Redirect2Admin: Exploiting an SSRF chain to leak internal keys and take over GitHub Enterprise Server

How a requirements check, authentication between services, and two Protobuf messages ended up exposing admin access to GHES.