KeyError: 'data-project-id'

[mksbcisco]

[>] Found By : vakzz [ https://hackerone.com/reports/827052 ] [>] PoC By : thewhiteh4t [ https://twitter.com/thewhiteh4t ]

[+] Target : URL [+] Username : USER [+] Password : PASS [+] Project Names : ProjectOne, ProjectTwo

[!] Trying to Login... /ncsrf-token in login func: [+] Login Successful! [!] Creating ProjectOne... [!] Creating ProjectTwo... [>] Absolute Path to File : /etc/passwd [!] Creating an Issue... [-] Status : 404 [-] Failed to Create an Issue! [!] Moving Issue... Traceback (most recent call last): File "/root/rce_gitlab.py", line 273, in move_issue(project_names[0], project_names[1], filename) File "/root/rce_gitlab.py", line 192, in move_issue project_id = body.attrs['data-project-id'] KeyError: 'data-project-id'

[mksbcisco]

seems body.attrs has nothing, it seems that it should have a value stored in key 'data-project-id' but nothing is assigned

[thewhiteh4t]

its for 12.8.1 ?

[mksbcisco]

Yes, I finally exploited with metasploit but wanted to use your way

[DenverEllis]

I'm also running into this error when running against gitlab 11.6.3

[wbzh0u]

Do you sovle this problem?l also meet this bug.

[thewhiteh4t]

@wbzh0u which version?

[killdayu]

@wbzh0u哪个版本？

gitlab 8.8.5 not work