cm0002@piefed.world to

cybersecurity@infosec.pubEnglish · 26 days ago

How We Exploited CodeRabbit: From a Simple PR to RCE and Write Access on 1M Repositories

research.kudelskisecurity.com

2

11

How We Exploited CodeRabbit: From a Simple PR to RCE and Write Access on 1M Repositories

research.kudelskisecurity.com

cm0002@piefed.world to

cybersecurity@infosec.pubEnglish · 26 days ago

2

In this blog post, we explain how we got remote code execution (RCE) on CodeRabbit’s production servers, leaked their API tokens and secrets, how we could have accessed their PostgreSQL datab…

You must log in or register to comment.

Chat

MadMadBunny@lemmy.ca
link
fedilink
arrow-up
2
arrow-down
2·
26 days ago
You did WHAT?!?
- starshipwinepineapple@programming.dev
  link
  fedilink
  arrow-up
  2·
  25 days ago
  Username checks out

cybersecurity@infosec.pub

cybersecurity@infosec.pub

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !cybersecurity@infosec.pub

An umbrella community for all things cybersecurity / infosec. News, research, questions, are all welcome!

Community Rules

Be kind
Limit promotional activities
Non-cybersecurity posts should be redirected to other communities within infosec.pub.

Enjoy!

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

17 users / day
118 users / week
436 users / month
2.02K users / 6 months
1 local subscriber
4.95K subscribers
890 Posts
1.9K Comments
Modlog