With malicious HTTP headers, any user could access any repo on Github.com, or on the Enterprise Github instance they might have access to. It's even worse than that because it's remote code execution on the Github server.
It seems like Github has been a mess since the Microsoft acquisition. Definitely feels like another multi billion dollar screwup in the making, like Skype or Nokia were.
Hopefully the incidents in the last few weeks are a wakeup call, and they start getting their shit together.
https://x.com/sagitz_/status/2049153195243372569
With malicious HTTP headers, any user could access any repo on Github.com, or on the Enterprise Github instance they might have access to. It's even worse than that because it's remote code execution on the Github server.
It seems like Github has been a mess since the Microsoft acquisition. Definitely feels like another multi billion dollar screwup in the making, like Skype or Nokia were.
Hopefully the incidents in the last few weeks are a wakeup call, and they start getting their shit together.