1
Public secrets exposure leads to supply chain attack on GitHub CodeQL
An exposed GitHub token could have been used to launch a supply chain attack on GitHub CodeQL, resulting in source code exposure and repository tampering of CodeQL users.
Praetorian Blog
Praetorian helps enterprises reduce cyber risk with continuous offensive security, attack surface management, vulnerability testing, red teaming, and threat intelligence.
- Popular posts
- 2
- Total points
- 454
- HN comments
- 131
- Rank
- #2,979 company
Visit praetorian.com → RSS feedOn Hacker News Mar 2022 – Mar 2025
2
Spring Core on JDK9 is vulnerable to remote code execution
Update: March 31, 2022 A patch has officially been released. https://spring.io/blog/2022/03/31/spring-framework-rce-early-announcement https://tanzu.vmware.com/security/cve-2022-22965 Overview Spring Core on JDK9+ is vulnerable to remote code execution due to a bypass for CVE-2010-1622. At the time of writing, this…