logoalt Hacker News

fastest963today at 4:31 AM1 replyview on HN

Yeah, but this still gives any employee RCE on the GHES server right?


Replies

jamesfinlaysontoday at 5:55 AM

I suppose so. The company invested pretty heavily in security tooling, though I think it wouldn't have been hard to do something to bypass the security for internal servers.