/log endpoint in the control server allowed anybody to write any content they liked to any file accessible to the server (or to create it).
Fixed by removing the endpoint. It was unused.
Self sign-up has been disabled due to increased spam activity. If you want to get access, please send an email to a project owner (preferred) or at gitlab(at)nic(dot)cz. We apologize for the inconvenience.
/log endpoint in the control server allowed anybody to write any content they liked to any file accessible to the server (or to create it).
Fixed by removing the endpoint. It was unused.