3 ms·
Let's say you sign up for a free account on a shared git-whatever.example.com and set it up to auto-mirror a malicious repo you host elsewhere. If git-whatever.
by 0x0 8y ago
Let's say you sign up for a free account on a shared git-whatever.example.com and set it up to auto-mirror a malicious repo you host elsewhere. If git-whatever.example.com(1) had implemented its mirror feature on top of regular git, boom and you might get shell access on their server and full access to any and all private repos stored on the same service.
(1) could be any shared service like gitlab.com, github.com, bitbucket.org, etc
- raesene9 8y agooh yeah, cool :) I was thinking about the issue from the perspective of an ordinary user of git, not of services that consume git repo's from other places. I guess this will make some bug bounties for researchers who can find services that haven't patched quickly...
- 0x0 8y agoSeems like this actually happened on github: https://twitter.com/_staaldraad/status/1001542421161930752 https://twitter.com/_staaldraad/status/1001542421161930752