IDOR Get milestone names of any private projects of Gitlabs
Link: https://hackerone.com/reports/412755 By: @ashish_r_padelkar
Details: Summary: Hello,
It is possible to get
Milestone names of all the GITLAB private projects
Description: When you create any issue for milestones, the following url is used
As you can see, there is parameter
issue%5Bmilestone_id%5D in the request which is the milestone ID. If you replace this ID with any sequential ID, you should see milestones which may be belong to private projects or groups!
Just visit the url
You should see name of the milestone populated in
This way you can enumerate all the milestones of GITLAB companies!!
Get milestone names of all the users from GITLAB