GitLab Email Feature Vulnerability Lets Attackers Push Code Into Private Repositories
Aikido says a leaked GitLab incoming-email token can push patches and trigger CI in victim projects.
1
1 stories, newest first · one card per story
Aikido says a leaked GitLab incoming-email token can push patches and trigger CI in victim projects.
Today 1.6K readers · 2.5K views · 779 reads · all time 189K views