#ssrf

Redirect2Admin: Exploiting an SSRF chain to leak internal keys and take over GitHub Enterprise Server

How a requirements check, authentication between services, and two Protobuf messages ended up exposing admin access to GHES.