Paragon Initiative Enterprises · Report #461429
Github repo's wiki publicly editable
How it was found
Hello Team,
Primablock Github repo's wiki page is publicly editable. This enables an attacker to edit the wiki pages of the affected repo's. Adding content that may link to malicious code libraries that would be installed and used by developers or information that may mislead users.
Links: https://github.com/paragonie/password_lock/wiki https://github.com/paragonie/easydb/wiki https://github.com/Swiggy/react-native-text-gradient/wiki
Impact
This enables an attacker to edit the wiki pages of the affected repo's. Adding content that may link to malicious code libraries that would be installed and used by developers or information that may mislead users.
Thank you.