Back to directory
WRITEUP #323

Devfile file write vulnerability in GitLab

RCEPath traversalArbitrary file writeParser diffentials
by@joernchen(joernchen)
Program
GitLab
Published
May 3, 2024
Added to HackDex
May 8, 2024
Read Full Writeuphttps://gitlab-com.gitlab.io/gl-security/security-tech-notes/security-research-tech-notes/devfile/
RELATED WRITEUPS
Zero-Click Calendar invite — Critical zero-click vulnerability chain in macOS
RCEArbitrary file write
Traccar 5 Remote Code Execution Vulnerabilities
RCEUnrestricted file upload
Path Traversal and Code Execution in CSLA.NET (CVE-2024-28698)
RCEPath traversal
Studying 0days: How we hacked Anki, the world's most popular flashcard app
RCEComponents with known vulnerabilities
We hacked Anki - 0 day exploit from studying someone elses flashcards
RCEComponents with known vulnerabilities

Built with ❤️ by Shubham Rawat