SSO bypass

One write past the chunk, read-write on the repo

How a heap overflow primitive chains with an SSO misconfiguration to reach internal source repos, with MITRE ATT&CK mapping and telemetry gaps.