CVE-2018-19585

This exploit leverages CVE-2018-19585 (combined with CVE-2018-19571) to achieve RCE in GitLab 11.4.7 by abusing Redis deserialization via a crafted project import URL. It sends a reverse shell payload through Redis commands injected into the project creation form.

This exploit leverages a Redis injection vulnerability in GitLab 11.4.7 to achieve remote code execution by manipulating the project import URL to inject malicious Redis commands, resulting in a reverse shell.