Lucene search
+L

2 matches found

Hacker One
Hacker One
added 2020/11/25 3:24 p.m.22 views

GitLab: Remote hacker can download all the files of master branch in public projects where everything is members only.

Summary Hi team, I found this weird behavior which I thought I should report, a malicious hacker can remotely download files of any branch in a public project where all permissions are ==member-only==, Gitlab uses a link to download files of a branch, normally ==an unauthenticated user will not b...

7AI score
SaveExploits0
Rows per page
Query Builder