A security risk in GitLab reveals that the private email address used for submitting issues can be exploited as a credential. Attackers who obtain this address can submit patches under a user’s name and execute CI/CD jobs within repositories the victim has access to, including the main branch.
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →