Vulnerability in GitLab allows code execution during CI builds for any project
Corrective updates for the collaborative development platform GitLab 15.11.2, 15.10.6, and 15.9.7 have been released, fixing a critical vulnerability (CVE-2023-2478) that allows any authenticated user to attach their own runner (task execution application for building project code in continuous integration) to any project on the same server through manipulation of the GraphQL API. Details of exploitation are not yet […]
