{"id":3106,"date":"2024-01-12T20:19:27","date_gmt":"2024-01-12T12:19:27","guid":{"rendered":"https:\/\/www.yaoge123.com\/blog\/?p=3106"},"modified":"2024-01-12T20:28:28","modified_gmt":"2024-01-12T12:28:28","slug":"gitlab-cve-2023-7028-%e4%b8%b4%e6%97%b6%e5%ba%94%e5%af%b9%e6%8e%aa%e6%96%bd","status":"publish","type":"post","link":"https:\/\/www.yaoge123.com\/blog\/archives\/3106","title":{"rendered":"GitLab CVE-2023-7028 \u4e34\u65f6\u5e94\u5bf9\u63aa\u65bd"},"content":{"rendered":"\n\n\n<p>\u4e00\u4e2a\u975e\u5e38\u65e0\u8bed\u7684\u9ad8\u5371\u6f0f\u6d1e\uff0c\u4efb\u4f55\u4eba\u90fd\u53ef\u4ee5\u91cd\u7f6e\u4efb\u610f\u8d26\u53f7\u7684\u5bc6\u7801\u7136\u540e\u53d1\u9001\u5230\u6307\u5b9a\u90ae\u7bb1<\/p>\n\n\n\n<p>\u5bf9\u4e8e\u5bb9\u5668\u90e8\u7f72\u6765\u8bf4\uff0c\u76f4\u63a5\u4fee\u6539 \/var\/opt\/gitlab\/nginx\/conf\/gitlab-http.conf \u6587\u4ef6\uff0c\u5728\u5176\u4e2d\u6dfb\u52a0<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>location \/users\/password { <br \/>  return 444; <br \/>}<\/code><\/pre>\n\n\n\n<p>\u7136\u540e\u91cd\u65b0\u52a0\u8f7dnginx\u914d\u7f6e\u6587\u4ef6<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>gitlab-ctl hup nginx<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter\"><div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\"><p lang=\"en\" dir=\"ltr\">GitLab CVE-2023-7028 POC<br><br>user[email][]=valid@email.com&amp;user[email][]=attacker@email.com <br><br>&#8211; PWNED<\/p>&mdash; b0yd (@rwincey) <a href=\"https:\/\/twitter.com\/rwincey\/status\/1745659710089437368?ref_src=twsrc%5Etfw\">January 12, 2024<\/a><\/blockquote><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script>\n<\/div><\/figure>\n","protected":false},"excerpt":{"rendered":"<p>\u4e00\u4e2a\u975e\u5e38\u65e0\u8bed\u7684\u9ad8\u5371\u6f0f\u6d1e\uff0c\u4efb\u4f55\u4eba\u90fd\u53ef\u4ee5\u91cd\u7f6e\u4efb\u610f\u8d26\u53f7\u7684\u5bc6\u7801\u7136\u540e\u53d1\u9001\u5230\u6307\u5b9a\u90ae\u7bb1 \u5bf9\u4e8e\u5bb9\u5668\u90e8\u7f72\u6765\u8bf4\uff0c\u76f4\u63a5\u4fee\u6539 \/var [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[8],"tags":[],"class_list":["post-3106","post","type-post","status-publish","format-standard","hentry","category-network"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/paOwEq-O6","_links":{"self":[{"href":"https:\/\/www.yaoge123.com\/blog\/wp-json\/wp\/v2\/posts\/3106","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.yaoge123.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.yaoge123.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.yaoge123.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.yaoge123.com\/blog\/wp-json\/wp\/v2\/comments?post=3106"}],"version-history":[{"count":5,"href":"https:\/\/www.yaoge123.com\/blog\/wp-json\/wp\/v2\/posts\/3106\/revisions"}],"predecessor-version":[{"id":3112,"href":"https:\/\/www.yaoge123.com\/blog\/wp-json\/wp\/v2\/posts\/3106\/revisions\/3112"}],"wp:attachment":[{"href":"https:\/\/www.yaoge123.com\/blog\/wp-json\/wp\/v2\/media?parent=3106"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.yaoge123.com\/blog\/wp-json\/wp\/v2\/categories?post=3106"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.yaoge123.com\/blog\/wp-json\/wp\/v2\/tags?post=3106"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}