pentester.land· May 4, 2022· by Vladimir Metnew (@vladimir_metnew)💰 Bounty: 500

[UNPATCHED] Cli: gh run download implementation allows overwriting git repository configuration upon artifacts downloading

Open Original Article ↗
Target Program: GitHub
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.
#RCE