GitLab has patched a critical-severity SAML authentication bypass affecting both Community Edition (CE) and Enterprise Edition (EE) instances.
The post GitLab Patches Critical Authentication Bypass Vulnerability appeared first on SecurityWeek.
GitLab Updates Resolve Critical Pipeline Execution Vulnerability
GitLab has released security updates to resolve multiple vulnerabilities in GitLab CE/EE, including a critical-severity pipeline execution flaw.
The post GitLab Updates Resolve Critical Pipeline Execution Vulnerability appeared first on SecurityWeek.
GitLab Ships Update for Critical Pipeline Execution Vulnerability
GitLab issues an advisory for a critical-severity vulnerability that allows an attacker to trigger a pipeline as another user.
The post GitLab Ships Update for Critical Pipeline Execution Vulnerability appeared first on SecurityWeek.
GitLab Security Updates Patch 14 Vulnerabilities
GitLab CE and EE updates resolve 14 vulnerabilities, including a critical- and three high-severity bugs.
The post GitLab Security Updates Patch 14 Vulnerabilities appeared first on SecurityWeek.
1,400 GitLab Servers Impacted by Exploited Vulnerability
CISA says a critical GitLab password reset flaw is being exploited in attacks and roughly 1,400 servers have not been patched.
The post 1,400 GitLab Servers Impacted by Exploited Vulnerability appeared first on SecurityWeek.
Thousands of GitLab Instances Unpatched Against Critical Password Reset Bug
Over 5,000 GitLab servers have yet to be patched against CVE-2023-7028, a critical password reset vulnerability.
The post Thousands of GitLab Instances Unpatched Against Critical Password Reset Bug appeared first on SecurityWeek.
GitLab Patches Critical Password Reset Vulnerability
GitLab has resolved a critical authentication vulnerability allowing attackers to hijack password reset emails.
The post GitLab Patches Critical Password Reset Vulnerability appeared first on SecurityWeek.
GitLab Patches Critical Pipeline Execution Vulnerability
GitLab has released security updates to address a critical-severity vulnerability allowing an attacker to run pipelines as another user.
The post GitLab Patches Critical Pipeline Execution Vulnerability appeared first on SecurityWeek.
GitLab Security Update Patches Critical Vulnerability
GitLab CE/EE version 16.0.1 patches a critical arbitrary file read vulnerability tracked as CVE-2023-2825.
The post GitLab Security Update Patches Critical Vulnerability appeared first on SecurityWeek.