A Vulnerability in GitLab Could Allow for Remote Code Execution
A vulnerability has been discovered in GitLab that could allow for remote code execution. GitLab is a DevOps platform that provides source code management, CI/CD pipelines, issue tracking, and collaboration tools in a single application for software development teams. Successful exploitation of this vulnerability could allow an unauthenticated attacker to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration. Successful exploitation could result in complete compromise of the affected system.
Read at CIS / MS-ISAC Cybersecurity Advisories
- Vendor
- GitLab
- Product
- GitLab
- Exposure class
- Developer platform
Why it ranks 20 (Routine)
- Product class: developer platform
- CERT coordination
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- CIS / MS-ISAC Cybersecurity Advisories (cisecurity.org)