SecOpsNews / news

RSS items as GitHub Issues for the discerning engineering leader or security professional
MIT License
33 stars 0 forks source link

[BleepingComputer] GitLab: Critical bug lets attackers run pipelines as other users #30958

Open github-actions[bot] opened 1 month ago

github-actions[bot] commented 1 month ago

GitLab warned today that a critical vulnerability in its product's GitLab Community and Enterprise editions allows attackers to run pipeline jobs as any other user. [...]

https://www.bleepingcomputer.com/news/security/gitlab-warns-of-critical-bug-that-lets-attackers-run-pipelines-as-an-arbitrary-user/