CVE-2020-10977

Python Exploit for gitlab private instance arbitrary file read At the date of 03/23/2020, a vulnerability report with its PoC was released in hackerone by William Bowling With this vulnerability we can read any world readable files with permission 444 or more on the gitlab server like /etc/passwd...