Skip to content
When JavaScript Chunks Become Keyholes to the Cloud
labs.cognisys.group | blog | #cloud | #cloud-security | #pentesting | #cicd | #javascript | #misconfiguration | #credential-leak
Summary
A JS bundle review escalated into cloud compromise: a misconfigured asset endpoint leaked CI/CD environment variables, turning frontend code into a master key to the client's cloud environment.
- Published
- Collected