* . *
  • About
  • Advertise
  • Privacy & Policy
  • Contact
Thursday, August 21, 2025
Earth-News
  • Home
  • Business
  • Entertainment
    Bama Dining Serving Up New Food, Entertainment – UA News Center

    Bama Dining Launches Thrilling New Food and Entertainment Experiences

    The latest on Williams-Brice Stadium renovations, entertainment district – On3

    Discover the Thrilling New Upgrades Coming to Williams-Brice Stadium and Its Vibrant Entertainment District!

    1000+ Entertainment Leaders Release Open Letter Criticizing TIFF’s Handling of Film – Creative Community for Peace

    1000+ Entertainment Leaders Release Open Letter Criticizing TIFF’s Handling of Film – Creative Community for Peace

    ‘The Lucky Ones’: Mae Ngai Sells Film & TV Rights To Neurosphere Entertainment – Deadline

    The Lucky Ones’: Mae Ngai Lands Thrilling Deal for Film and TV Adaptations

    Our picks for the best things to do in Cincinnati this week, Aug. 18-24 – Cincinnati Enquirer

    Unmissable Things to Do in Cincinnati This Week, Aug. 18-24

    Terence Stamp: from arthouse icon to blockbuster villain – yahoo.com

    Terence Stamp: From Arthouse Legend to Hollywood’s Ultimate Villain

  • General
  • Health
  • News

    Cracking the Code: Why China’s Economic Challenges Aren’t Shaking Markets, Unlike America’s” – Bloomberg

    Trump’s Narrow Window to Spread the Truth About Harris

    Trump’s Narrow Window to Spread the Truth About Harris

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Trending Tags

    • Trump Inauguration
    • United Stated
    • White House
    • Market Stories
    • Election Results
  • Science
  • Sports
  • Technology
    Denver man receives pacemaker using new technology – CBS News

    Denver Man’s Life Transformed by Revolutionary Pacemaker Technology

    Morgan County Rescue Squad is using new technology to recover people missing in the water faster – WAFF

    Morgan County Rescue Squad is using new technology to recover people missing in the water faster – WAFF

    YSU to celebrate launch of new radiology technology program – WKBN.com

    YSU Launches Exciting New Radiology Technology Program Celebration

    Thaddeus Stevens College of Technology kicks off return to school for Lancaster County colleges [photos] – LancasterOnline

    Thaddeus Stevens College of Technology Kicks Off an Exciting New School Year for Lancaster County Colleges [Photos]

    Empyrean Technology’s revenue climbs, but profit plunges 92% in EDA spending squeeze – digitimes

    Empyrean Technology’s Revenue Skyrockets as Profits Plunge 92% Amid EDA Spending Crunch

    5G-A technology provides strong support for China’s football sensation Suchao – Global Times

    How 5G-A Technology is Revolutionizing China’s Football Star Suchao

    Trending Tags

    • Nintendo Switch
    • CES 2017
    • Playstation 4 Pro
    • Mark Zuckerberg
No Result
View All Result
  • Home
  • Business
  • Entertainment
    Bama Dining Serving Up New Food, Entertainment – UA News Center

    Bama Dining Launches Thrilling New Food and Entertainment Experiences

    The latest on Williams-Brice Stadium renovations, entertainment district – On3

    Discover the Thrilling New Upgrades Coming to Williams-Brice Stadium and Its Vibrant Entertainment District!

    1000+ Entertainment Leaders Release Open Letter Criticizing TIFF’s Handling of Film – Creative Community for Peace

    1000+ Entertainment Leaders Release Open Letter Criticizing TIFF’s Handling of Film – Creative Community for Peace

    ‘The Lucky Ones’: Mae Ngai Sells Film & TV Rights To Neurosphere Entertainment – Deadline

    The Lucky Ones’: Mae Ngai Lands Thrilling Deal for Film and TV Adaptations

    Our picks for the best things to do in Cincinnati this week, Aug. 18-24 – Cincinnati Enquirer

    Unmissable Things to Do in Cincinnati This Week, Aug. 18-24

    Terence Stamp: from arthouse icon to blockbuster villain – yahoo.com

    Terence Stamp: From Arthouse Legend to Hollywood’s Ultimate Villain

  • General
  • Health
  • News

    Cracking the Code: Why China’s Economic Challenges Aren’t Shaking Markets, Unlike America’s” – Bloomberg

    Trump’s Narrow Window to Spread the Truth About Harris

    Trump’s Narrow Window to Spread the Truth About Harris

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Trending Tags

    • Trump Inauguration
    • United Stated
    • White House
    • Market Stories
    • Election Results
  • Science
  • Sports
  • Technology
    Denver man receives pacemaker using new technology – CBS News

    Denver Man’s Life Transformed by Revolutionary Pacemaker Technology

    Morgan County Rescue Squad is using new technology to recover people missing in the water faster – WAFF

    Morgan County Rescue Squad is using new technology to recover people missing in the water faster – WAFF

    YSU to celebrate launch of new radiology technology program – WKBN.com

    YSU Launches Exciting New Radiology Technology Program Celebration

    Thaddeus Stevens College of Technology kicks off return to school for Lancaster County colleges [photos] – LancasterOnline

    Thaddeus Stevens College of Technology Kicks Off an Exciting New School Year for Lancaster County Colleges [Photos]

    Empyrean Technology’s revenue climbs, but profit plunges 92% in EDA spending squeeze – digitimes

    Empyrean Technology’s Revenue Skyrockets as Profits Plunge 92% Amid EDA Spending Crunch

    5G-A technology provides strong support for China’s football sensation Suchao – Global Times

    How 5G-A Technology is Revolutionizing China’s Football Star Suchao

    Trending Tags

    • Nintendo Switch
    • CES 2017
    • Playstation 4 Pro
    • Mark Zuckerberg
No Result
View All Result
Earth-News
No Result
View All Result
Home Technology

GitLab: Critical bug lets attackers run pipelines as other users

July 11, 2024
in Technology
GitLab: Critical bug lets attackers run pipelines as other users
Share on FacebookShare on Twitter

GitLab

GitLab warned today that a critical vulnerability in its product’s GitLab Community and Enterprise editions allows attackers to run pipeline jobs as any other user.

The GitLab DevSecOps platform has over 30 million registered users and is used by over 50% of Fortune 100 companies, including T-Mobile, Goldman Sachs, Airbus, Lockheed Martin, Nvidia, and UBS.

The flaw patched in today’s security update is tracked as CVE-2024-6385, and it received a CVSS base score severity rating of 9.6 out of 10.

It impacts all GitLab CE/EE versions from 15.8 to 16.11.6, 17.0 to 17.0.4, and 17.1 to 17.1.2. Under certain circumstances that GitLab has yet to disclose, attackers can exploit it to trigger a new pipeline as an arbitrary user.

GitLab pipelines are a Continuous Integration/Continuous Deployment (CI/CD) system feature that lets users automatically run processes and tasks in parallel or sequentially to build, test, or deploy code changes.

The company released GitLab Community and Enterprise versions 17.1.2, 17.0.4, and 16.11.6 to address this critical security flaw and advised all admins to upgrade all installations immediately.

“We strongly recommend that all installations running a version affected by the issues described below are upgraded to the latest version as soon as possible,” it warned. “GitLab.com and GitLab Dedicated are already running the patched version.”

Account takeover flaw actively exploited in attacks

GitLab patched an almost identical vulnerability (tracked as CVE-2024-5655) in late June, which could also be exploited to run pipelines as other users.

One month earlier, it fixed a high-severity vulnerability (CVE-2024-4835) that enables unauthenticated threat actors to take over accounts in cross-site scripting (XSS) attacks.

As CISA warned in May, threat actors are also actively exploiting another zero-click GitLab vulnerability (CVE-2023-7028) patched in January. This vulnerability allows unauthenticated attackers to hijack accounts via password resets.

While Shadowserver found over 5,300 vulnerable GitLab instances exposed online in January, less than half (1,795) are still reachable today.

Attackers target GitLab because it hosts various types of sensitive corporate data, including API keys and proprietary code, leading to significant security impact following a breach.

This includes supply chain attacks if the threat actors insert malicious code in CI/CD (Continuous Integration/Continuous Deployment) environments, compromising the breached organization’s repositories.

>>> Read full article>>>
Copyright for syndicated content belongs to the linked Source : BleepingComputer – https://www.bleepingcomputer.com/news/security/gitlab-warns-of-critical-bug-that-lets-attackers-run-pipelines-as-an-arbitrary-user/

Tags: criticalGitLabtechnology
Previous Post

ViperSoftX malware covertly runs PowerShell using AutoIT scripting

Next Post

Huione Guarantee exposed as a $11 billion marketplace for cybercrime

Jalene LaMontagne, colleagues win Robert P. McIntosh Award from the Vegetation Section of the Ecological Society of America for research on community synchrony in seed production – UMSL Blogs

Jalene LaMontagne, colleagues win Robert P. McIntosh Award from the Vegetation Section of the Ecological Society of America for research on community synchrony in seed production – UMSL Blogs

August 21, 2025
Scientists just found a hidden factor behind Earth’s methane surge – ScienceDaily

Scientists Uncover Surprising Hidden Cause Behind Earth’s Methane Surge

August 21, 2025
50 Years After Discovery, Mysterious ‘Eye of Sauron’ Jets May Finally Be Solved – ScienceAlert

50 Years On, the Mystery of the ‘Eye of Sauron’ Jets Could Finally Be Unraveled

August 21, 2025
Off-gridder shares inside look at difficult aspects of lifestyle: ‘I’m willing to make sacrifices’ – yahoo.com

Living Off the Grid: One Person’s Raw and Honest Journey Through Tough Challenges and Sacrifices

August 21, 2025
Families turn to pawn shops for more affordable technology for school year – WVIR

Why Families Are Turning to Pawn Shops for Affordable Back-to-School Tech

August 21, 2025
4 Trades Have NFL World Buzzing On Wednesday Night – Yahoo Sports

4 Game-Changing NFL Trades Coming This Wednesday Night

August 21, 2025
Econ 101: A Compass for a Lost Country – The Daily Economy

Econ 101: Unlocking the Secrets to Building a Brighter Future

August 21, 2025
Bama Dining Serving Up New Food, Entertainment – UA News Center

Bama Dining Launches Thrilling New Food and Entertainment Experiences

August 21, 2025
Putting sleep at the center of health care – The University of Arizona

Transform Your Health by Putting Sleep at the Center of Your Wellness Routine

August 21, 2025
Trump’s remarkable statement against states’ rights – CNN

Trump’s remarkable statement against states’ rights – CNN

August 21, 2025

Categories

Archives

August 2025
MTWTFSS
 123
45678910
11121314151617
18192021222324
25262728293031
« Jul    
Earth-News.info

The Earth News is an independent English-language daily published Website from all around the World News

Browse by Category

  • Business (20,132)
  • Ecology (782)
  • Economy (803)
  • Entertainment (21,681)
  • General (16,587)
  • Health (9,842)
  • Lifestyle (815)
  • News (22,149)
  • People (805)
  • Politics (811)
  • Science (16,016)
  • Sports (21,301)
  • Technology (15,783)
  • World (784)

Recent News

Jalene LaMontagne, colleagues win Robert P. McIntosh Award from the Vegetation Section of the Ecological Society of America for research on community synchrony in seed production – UMSL Blogs

Jalene LaMontagne, colleagues win Robert P. McIntosh Award from the Vegetation Section of the Ecological Society of America for research on community synchrony in seed production – UMSL Blogs

August 21, 2025
Scientists just found a hidden factor behind Earth’s methane surge – ScienceDaily

Scientists Uncover Surprising Hidden Cause Behind Earth’s Methane Surge

August 21, 2025
  • About
  • Advertise
  • Privacy & Policy
  • Contact

© 2023 earth-news.info

No Result
View All Result

© 2023 earth-news.info

No Result
View All Result

© 2023 earth-news.info

Go to mobile version