wiz-sec / open-cvdb

An open project to list all publicly known cloud vulnerabilities and CSP security issues
https://cloudvulndb.org
Creative Commons Attribution 4.0 International
303 stars 61 forks source link

[Contribution] XSS to Cloud Shell instance takeover (RCE as root) #238

Open korniko98 opened 11 months ago

korniko98 commented 11 months ago

References (provide links to blogposts, etc.)

https://omespino.com/write-up-google-bug-bounty-xss-to-cloud-shell-instance-takeover-rce-as-root-5000-usd/