Gitlab Project Import Remote Code Execution

This strike exploits an OS command injection vulnerability in Gitlab. The vulnerability is due to improper handling of the import_source field. A remote Authenticated attacker can exploit the vulnerability by performing a bulk import from a server controlled by the attacker. Successful exploitation can result in remote code execution. Note: This strike includes just the last part of the attack where targeted server requires data from the custom server controlled by the attacker and the attacker's response.