[GTALUG] Maximum-severity GitLab flaw allowing account hijacking under active exploitation
Ron / BCLUG via talk <[email protected]> Thu, 2 May 2024 13:59:08 -0700
| Newsgroups | gmane.org.user-groups.linux.gtalug.general,gmane.org.user-groups.linux.cabal |
|---|---|
| Organization | BCLUG.ca |
| Message-ID | <[email protected]> |
This one looks fun: > A maximum severity vulnerability that allows hackers to hijack GitLab > accounts with no user interaction required is now under active > exploitation, federal government officials warned as data showed that > thousands of users had yet to install a patch released in January. https://arstechnica.com/security/2024/05/0-click-gitlab-hijacking-flaw-under-active-exploit-with-thousands-still-unpatched/ > The vulnerability, tracked as CVE-2023-7028, carries a severity rating > of 10 out of 10. Make sure you're patched if you run GitLab! rb -- BCLUG.ca https://bclug.ca To subscribe, send an email to [email protected] List Web site: https://lists.bclug.ca/mailman/listinfo/discuss --- Post to this mailing list [email protected] Unsubscribe from this mailing list https://gtalug.org/mailman/listinfo/talk