CVE-2018-18649 PoC — GitLab 输入验证错误漏洞

Source

https://github.com/Snowming04/CVE-2018-18649

Associated Vulnerability

Title: GitLab 输入验证错误漏洞 (CVE-2018-18649)
Description:An issue was discovered in the wiki API in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before 11.3.8, and 11.4.x before 11.4.3. It allows for remote code execution.

Description

CVE-2018-18649 EXP

Readme

# CVE-2018-18649
CVE-2018-18649 EXP


EXP 说明见：

[Gitlab Wiki API 远程命令执行漏洞 (CVE-2018-18649)](http://blog.leanote.com/post/snowming/b1a0b71e55c7)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →