Hacktron's OpenAI bounty: Discourse RCE met an SSO bridge
A July chain on community.openai.com reached ChatGPT and Codex. OpenAI paid $6,500 for the identity finding. Discourse's HEIF advisory tells self-hosters to rebuild.
Read the piecePublished Frontier reporting tagged “sso”.
3 articles · Full archive · Topics
3 recent pieces
A July chain on community.openai.com reached ChatGPT and Codex. OpenAI paid $6,500 for the identity finding. Discourse's HEIF advisory tells self-hosters to rebuild.
Read the pieceNew releases, then the constraint.