writeups.xyz / Responsible disclosure: improper access control in Gitlab private project.

Submitter : c2a

Date: 19 April 2019

Bounty : 2,000

Vulnerabilities :

• Broken Authorization

Programs :

• GitLab

Authors :

• Riccardo Padovani (@Rpadovani93)

Link :
https://rpadovani.com/gitlab-responsible-disclosure