Vulnerability in GitLab allows code execution during CI builds of any project
Corrective updates have been released for the collaborative development platform — GitLab 15.11.2, 15.10.6, and 15.9.7, which resolve a critical vulnerability (CVE-2023-2478) that enables any authenticated user to attach their own runner handler (an application for executing tasks during code builds in a continuous integration system) to any project on the same server through GraphQL API manipulation. Details of the exploit are still […]
