writeups.xyz / Chaining multiple low-impact bugs to arbitrary file read in GitLab

Submitter : c2a

Date: 4 June 2019

Bounty : undisclosed

Vulnerabilities :

• Path Traversal

Programs :

• GitLab

Authors :

• Li Rongxi (@Nyan_gawa)

Link :
https://blog.nyangawa.me/security/GitLab-Local-File-Read/