GitLab: Critical bug lets attackers run pipelines as other users
GitLab has disclosed a critical vulnerability (CVE-2024-6385) in its Community and Enterprise editions, allowing attackers to run pipeline jobs as any user. This flaw, with a CVSS score of 9.6, affects versions 15.8 to 16.11.6, 17.0 to 17.0.4, and 17.1 to 17.1.2. GitLab has released patches and advises immediate updates. This follows previous vulnerabilities, including one that enables account takeovers via XSS attacks. GitLab's security is critical due to its role in managing sensitive corporate data and CI/CD processes.
Comments