How We Exploited CodeRabbit: From a Simple PR to RCE and Write Access on 1M Repositories – Kudelski Security Research
In this blog post, we explain how we got remote code execution (RCE) on CodeRabbit’s production servers, leaked their API tokens and secrets, how we could have accessed their PostgreSQL datab…| Kudelski Security Research
