Blind SSRF in FogBugz project import

1. Run GitLab `docker run --detach --hostname gitlab.example.com --publish 443:443 --publish 80:80 --publish 22:22 --name gitlab gitlab/gitlab-ce:latest` 2. Connect to the GitLab Docker container: `docker exec -it gitlab /bin/bash` 3. Install netcat: `apt update && apt install -y netcat` 4. Run …

root@gitlab:/# gitlab-rake gitlab:env:info

System information
System:    
Current User:  git
Using RVM:  no
Ruby Version:  2.6.3p62
Gem Version:  2.7.9
Bundler Version:1.17.3
Rake Version:  12.3.2
Redis Version:  3.2.12
Git Version:  2.22.0
Sidekiq Version:5.2.7
Go Version:  unknown

GitLab …