Gitlab 任意文件读取

正文

https://hackerone.com/reports/827052

gitlab 挖掘专家 (chaitin)
https://hackerone.com/saltyyolk

以及 blog
https://blog.nyangawa.me/security/GitLab-Local-File-Read/