$29,000 GitLab - Arbitrary File Read using symlinks

This video is about a vulnerability in GitLab that allowed reading any files from the server. The reporter, William Bowling, was rewarded $29,000 of bug bounty.

Timestamps:

00:00 Intro
00:34 Importing GitLab groups
02:00 Symlinks
04:30 POC - reading arbitrary files on GitLab

[kiedysbedemilionerem]

Powodzenia z tym kanałem, robisz kozacką robotę

[Al-rtec]

I need how to get this bug bounty report in detail

[e.donker]

Very interesting bug! Thanks for the clear explanation

[cyber-man]

Very cool new animations in the report explained (and sound effects too) - but I'm not so sure about the fish-eye camera, are u?

[bdsgameing]

I'm back for watching your videos

[matteo]

This is basically zipslip, isn't it? Nonetheless it's an interesting finding!