2026年10月13日 4:43 ET 发布 · 更新于 1 个月前 · 1 个来源
GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code
The Hacker News
·
原始报道
GitLab has released patches for a maximum-severity security flaw impacting its Community Edition (CE) and Enterprise Edition (EE) software that could result in arbitrary code execution. "GitLab has remediated an issue that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD
原文