writeups.xyz / Devfile file write vulnerability in GitLab

Submitter : c2a

Date: 3 May 2024

Bounty : undisclosed

Vulnerabilities :

• Path Traversal
• Arbitrary File Write
• RCE
• Parser Diffentials

Programs :

• GitLab

Authors :

• Joernchen (@Joernchen)

Link :
https://gitlab-com.gitlab.io/gl-security/security-tech-notes/security-research-tech-notes/devfile/