Technology

GitLab releases a patch for Critical CI/CD Pipeline Vulnerability.

SOURCES
Mastodon9
  • @edwardk@infosec.exchange
    GitLab has a critical vulnerability (CVE-2024-6385) in its DevOps platform that allows attackers to run a pipeline in the context of any user, potentially gaining unauthorized access to projects, data, and code repositories.
  • @linguo@mastodon.social
    Gitlab Fixes Security Flaw That Lets Attackers Run Pipeline Jobs
  • @patrickcmiller@infosec.exchange
    GitLab Ships Update for Critical Pipeline Execution Vulnerability
  • @AIWIKI@ai.wiki
    GitLab Releases Patch for Critical CI/CD Pipeline Vulnerability and 13 Others
  • @ClubTeleMatique@mstdn.social
    Hacker News: GitLab Releases Patch for Critical CI/CD Pipeline Vulnerability and 13 Others