Gitlab system_hook_push Remote Code Execution Vulnerability

GitLab is a set of open source applications developed using Ruby on Rails to implement a self-hosted Git version control system project repository, which has similar functionality to Github, with access to a project's file contents, commit history, bug lists, etc. The GitLab Community Edition CE ...

PT-2018-5143

Name of the Vulnerable Software and Affected Versions Gitlab Community Edition version 10.3 Description The issue is related to a lack of input validation in the system hook push queue through the web hook component, resulting in remote code execution. Recommendations For Gitlab Community Edition...