EUVD-2021-10004

Malware in sbrugna...

CVE-2021-22869: Exposure of Resource to Wrong Sphere

An improper access control vulnerability in GitHub Enterprise Server allowed a workflow job to execute in a self-hosted runner group it should not have had access to. This affects customers using self-hosted runner groups for access control. A repository with access to one enterprise runner group...