pentester.land· Aug 25, 2022· by Joren Vrancken💰 Bounty: 4,000

Command Injection in the GitHub Pages Build Pipeline

Target Program: GitHub

🎯 Vulnerability: Remote Code Execution (RCE)

💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.

#RCE#OS command injection