A GitLab platform vulnerability in Hang Seng leaked a large number of sensitive engineering source code.

A GitLab platform vulnerability in Hang Seng leaked a large number of sensitive engineering source code.

Rt

Detailed description:

Http: // 60.191.25.162: 5222/users/sign_in

Register an account and log on

The source code of the Internally shared project can be seen directly.

Proof of vulnerability:

There are alipay interfaces, Ali payment interfaces, a large number of sensitive code
 

Solution:

The internal platform should be placed in the internal system and verified after the user registration.