O faʻafouga faʻasaʻo i luga o le faʻavae mo le faʻatulagaina o atinaʻe galulue faʻatasi ua faʻasalalau - GitLab 15.11.2, 15.10.6 ma le 15.9.7, lea e faʻaumatia ai se faʻafitauli matuia (CVE-2023-2478), lea e mafai ai e soʻo se tagata faʻaoga faʻamaonia ona faʻapipiʻi a latou lava tagata taʻavale. e ala i le faʻaogaina ma le GraphQL API ( talosaga mo galuega faʻatino pe a faʻapipiʻi tulafono faʻavae i se faiga faʻaauau faʻatasi) i soʻo se poloketi i luga o le server lava e tasi. E le'i tu'uina atu fa'amatalaga fa'agaioiga. O faʻamatalaga e uiga i le faʻafitauli na tuʻuina atu i GitLab o se vaega o le polokalama faʻapitoa a le HackerOne.
puna: opennet.ru
