gitlab-gitea-import-ssrf

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · gitlab-gitea-import-ssrf gitlab-gitea-import-ssrf GitLab CE 19.4.1 - GitLab Inc. Gitea import calls UrlBlocker.validate! once, then for https throws away the IP-pinned URI and hands Faraday the original hostname...