A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You
A leaked GitLab incoming-email token lets outsiders commit code and run CI jobs as the account owner.
1
Stories per day · 30 days
2 stories, newest first · one card per story
Stories tagged #token
GitLab Email Feature Vulnerability Lets Attackers Push Code Into Private Repositories
Aikido says a leaked GitLab incoming-email token can push patches and trigger CI in victim projects.
1