Re:$36k Google App Engine RCE
by joatmon-snoo on Tuesday May 22, 2018 @01:34AM
(#17123932)
You want the part of the write-up where it mentions he gets FILE_GOOGLE3_ACCESS.
I'm not sure what access that actually gives, but that email thread showing people getting +cc'd on the ticket speaks pretty obviously to the severity and magnitude of the problem.
I'm not sure what access that actually gives, but that email thread showing people getting +cc'd on the ticket speaks pretty obviously to the severity and magnitude of the problem.
(Am Googler.)