GitLab releases a patch for Critical CI/CD Pipeline Vulnerability.

SOURCES
Mastodon9
- @edwardk@infosec.exchangeGitLab has a critical vulnerability (CVE-2024-6385) in its DevOps platform that allows attackers to run a pipeline in the context of any user, potentially gaining unauthorized access to projects, data, and code repositories.
- @linguo@mastodon.socialGitlab Fixes Security Flaw That Lets Attackers Run Pipeline Jobs
- @patrickcmiller@infosec.exchangeGitLab Ships Update for Critical Pipeline Execution Vulnerability
- @AIWIKI@ai.wikiGitLab Releases Patch for Critical CI/CD Pipeline Vulnerability and 13 Others
- @ClubTeleMatique@mstdn.socialHacker News: GitLab Releases Patch for Critical CI/CD Pipeline Vulnerability and 13 Others