
GitLab Email Token Lets Attackers Push Code to Main and Execute CI/CD Jobs
GitLab incoming email tokens can push code, open merge requests, and run CI/CD while bypassing IP allowlists.
2
1 stories, newest first · one card per story

GitLab incoming email tokens can push code, open merge requests, and run CI/CD while bypassing IP allowlists.
Today 1.6K readers · 2.5K views · 779 reads · all time 189K views