CVE-2020-10977 PoC — GitLab 路径遍历漏洞

Source

Associated Vulnerability

Description

Exploit for "GitLab Instance" Arbitrary server file read vulnerability

Readme

# Python Exploit for gitlab private instance arbitrary file read
At the date of 03/23/2020, a vulnerability report with its PoC was released in hackerone by **William Bowling**\
With this vulnerability we can read any world readable files (with permission 444 or more) on the gitlab server like /etc/passwd and so on... (worldreadable files only)\
```
Notice that you should be authenticated user
```

I've tested it on gitlab version 21.9.0 (ubuntu 18.04) but it's OS independent

# exploit-db
Many thanks to **exploit-db** team for publishing this exploit\
https://www.exploit-db.com/exploits/48431


# Credit
Many thanks to **William Bowling**\
vulnerability disclosed by : **William Bowling** of Biteable, a.k.a vakzz\
https://hackerone.com/reports/827052

File Snapshot

 [4.0K]  /data/pocs/e251df36457a715de541a4c56b83a96b91812516
├── [ 760]  README.md
└── [7.9K]  ReadServerFiles.py

0 directories, 2 files

Remarks