2 ms·
Indeed. Also I wonder if Gitlab is still using this. Gitlab self-hosted users who didn't patch got bitten with in the wild exploitation: https://www.rapid7.com
by fulafel 3y ago
Indeed. Also I wonder if Gitlab is still using this.
Gitlab self-hosted users who didn't patch got bitten with in the wild exploitation: https://www.rapid7.com/blog/post/2021/11/01/gitlab-unauthenticated-remote-code-execution-cve-2021-22205-exploited-in-the-wild/ https://www.rapid7.com/blog/post/2021/11/01/gitlab-unauthent...
- mdaniel 3y agoSeems the answer is yes: https://gitlab.com/search?search=exiftool&nav_source=navbar&project_id=278964&group_id=9970&search_code=true&repository_ref=master https://gitlab.com/search?search=exiftool&nav_source=navbar&... https://gitlab.com/gitlab-org/gitlab/-/blob/v16.8.1-ee/lib/gitlab/sanitizers/exif.rb#L137 https://gitlab.com/gitlab-org/gitlab/-/blob/v16.8.1-ee/lib/g... and https://gitlab.com/gitlab-org/gitlab/-/blob/v16.8.1-ee/lib/gitlab/sanitizers/exif.rb#L187 https://gitlab.com/gitlab-org/gitlab/-/blob/v16.8.1-ee/lib/g...