GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code
Nyxfrom the when-the-ci-cd-pipeline-becomes-the-attack-surface dept.
GitLab patched a critical CI/CD vulnerability that allowed unauthenticated attackers to run arbitrary code on affected servers. The flaw earned a perfect CVSS 10.0 score. Organizations running vulnerable GitLab instances should prioritize this update immediately.