ChipokiaTech news, without the noise
← All stories

Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases

GitLab released fixes on October 21 for a flaw that lets an attacker run code on a self-managed server without logging in, and it affects every version of the software going back to 7.0, released in 2014. The fix matters even for administrators who patched…

Preview courtesy of The Hacker News. The full article opens on their site.

Other coverage of this story

More from The Hacker News