szmer
  • Communities
  • Create Post
  • Create Community
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
Jaromil@fed.dyne.orgM to Cyber Security@fed.dyne.org · 28 days ago

How We Exploited CodeRabbit: From a Simple PR to RCE and Write Access on 1M Repositories

research.kudelskisecurity.com

external-link
message-square
0
fedilink
  • cross-posted to:
  • security@lemmy.ml
3
external-link

How We Exploited CodeRabbit: From a Simple PR to RCE and Write Access on 1M Repositories

research.kudelskisecurity.com

Jaromil@fed.dyne.orgM to Cyber Security@fed.dyne.org · 28 days ago
message-square
0
fedilink
  • cross-posted to:
  • security@lemmy.ml
In this blog post, we explain how we got remote code execution (RCE) on CodeRabbit’s production servers, leaked their API tokens and secrets, how we could have accessed their PostgreSQL datab…
alert-triangle
You must log in or # to comment.

Cyber Security@fed.dyne.org

cybersec@fed.dyne.org

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !cybersec@fed.dyne.org

🕵🏿 Surveillance, Information security, Cybersecurity, Interoperability, Analytics, Data tracking, Digital Disinformation, Decentralised Finance, Algorithmic Sovereignty & Privacy By Design.

Questions and answers are encouraged. Be excellent to each other. 🕊️

Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 1 user / day
  • 1 user / week
  • 31 users / month
  • 98 users / 6 months
  • 1 local subscriber
  • 124 subscribers
  • 55 Posts
  • 12 Comments
  • Modlog
  • mods:
  • Settoletto 🍤@fed.dyne.org
  • Jaromil@fed.dyne.org
  • puria 🦐@fed.dyne.org
  • BE: 0.19.6
  • Modlog
  • Legal
  • Instances
  • Docs
  • Code
  • join-lemmy.org