Gitlab Community Edition News Today

As mentioned by the cyber agency, an attacker could use “these vulnerabilities by persuading a victim to visit a specially crafted website.”

The Indian Computer Emergency Response Team (CERT-In), which comes under the Ministry of Electronics & Information Technology, has warned users of multiple vulnerabilities in Google Chrome and GitLab (an open-core company) which could allow ...

The Indian Computer Emergency Response Team (commonly known by CERT-In), which comes under the Ministry of Electronics & Information Technology, has alerted users about multiple vulnerabilities present in Google Chrome and  GitLab (an open-core company).

CISA on Wednesday confirmed that the GitLab account takeover vulnerability Is being actively exploited in attacks.

New flaw with a severity score of 9.9 found in GitLab

CVE-2024-0402, CVSS score 9.9, may affect more than 4,800 unpatched GitLab servers.

A critical zero-click account takeover exploit affects GitLab Community and Enterprise Editions.

GitLab has released versions 16.7.2, 16.6.4, and 16.5.6 for GitLab CE/EE to fix two critical flaws, of which one allows account hijacking.

No user interaction is required for takeover; GitLab CE and EE users should patch immediately.

Two vulnerabilities are critical, and three others are determined to be of high, medium, and low severity.