National Cyber Warfare Foundation (NCWF) Forums


New Critical GitLab Vulnerability Could Allow Arbitrary CI CD Pipeline Execution


0 user ratings
2024-10-11 07:23:03
milo
Blue Team (CND)
GitLab has released security updates for Community Edition (CE) and Enterprise Edition (EE) to address eight security flaws, including a critical bug that could allow running Continuous Integration and Continuous Delivery (CI/CD) pipelines on arbitrary branches.
Tracked as CVE-2024-9164, the vulnerability carries a CVSS score of 9.6 out of 10.

"An issue was discovered in GitLab EE



Source: TheHackerNews
Source Link: https://thehackernews.com/2024/10/new-critical-gitlab-vulnerability-could.html


Comments
new comment
Nobody has commented yet. Will you be the first?
 
Forum
Blue Team (CND)



Copyright 2012 through 2024 - National Cyber Warfare Foundation - All rights reserved worldwide.