GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code

8 hours ago [email protected] (The Hacker News)
GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code


GitLab has released patches for a maximum-severity security flaw impacting its Community Edition (CE) and Enterprise Edition (EE) software that could result in arbitrary code execution.

“GitLab has remediated an issue that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD

The post “GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code” appeared first on The Hacker News

Source:The Hacker News – [email protected] (The Hacker News)

Tags: , ,

More Stories

[Webinar] How to Stop AI-Driven Privilege Escalation With Runtime Identity Controls

5 hours ago [email protected] (The Hacker News)

LG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local Network

6 hours ago [email protected] (The Hacker News)

Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch

1 day ago [email protected] (The Hacker News)

Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE

1 day ago [email protected] (The Hacker News)

P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands

4 days ago [email protected] (The Hacker News)

Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access

4 days ago [email protected] (The Hacker News)