writeups.xyz / [GITLAB] — Server Side Request Forgery in “Project Import” page.

Submitter : c2a

Date: 13 February 2021

Bounty : 1,500

Vulnerabilities :

• SSRF

Programs :

• GitLab

Authors :

• Lyubomir Tsirkov (@Lyubo_tsirkov)

Link :
https://ltsirkov.medium.com/gitlab-server-side-request-forgery-in-project-import-page-6fdb9ef423e4