Hackers HATE This GitLab Root Password Method - OpenSIPS Trunking Solutions
Overview
The vulnerability resided within gitlab's post /users/password api endpoint, which is responsible for a password reset. Read also: 5 Things You Didn't Know About This Knoxville Craigslist Find
The pentester exploited a flaw in email address validation,. Read also: What Top Scientists Say About The EMF-CNF Connection And Your Risk
In this scenario, we have the victims email (victim@mail. gitlab. thm) and attackers email (attacker@mail. gitlab. thm).
Intercept the passwords request using.
I believe the fix is here:
The error enables the attacker to advance from reading files in the system to executing arbitrary.