IBM · Report #1379130
Remote Code Execution at https://169.38.86.185/ (edst.ibm.com)
Validstatus
criticalseverity
49upvotes
4 Nov 2021disclosed
Summary
A discovered Gitlab server was running an old version affected by RCE. This vulnerability could have allowed an unauthenticated attackers to compromise the server by public exploit in ExifTool. The issue was reported to IBM and remediated.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.