Improper input validation in all versions of GitLab CE/EE using sendmail to send emails allowed an attacker to steal environment variables via specially crafted email addresses...
7.5CVSS7.1AI score0.01454EPSS
SaveExploits0References2
Hacker One•added 2020/03/02 1:59 p.m.•43 views
Mail.ru: [v7lk.relap.io] Sending arbitrary emails to any user
Mail sending API endpoint at relap.io was publicly accessible...
