Critical GitLab Flaw Enables XSS and Unauthenticated DoS Attacks
ID: 42aaa9aa-3efb-5299-9cfa-7b84d70d642b
STIX ID: report--42aaa9aa-3efb-5299-9cfa-7b84d70d642b
Feed Name: Cyber Press
Threat Score
GitLab released emergency patches addressing 25 vulnerabilities in self-managed CE/EE deployments — notably four high-severity XSS flaws enabling session hijacking and three unauthenticated DoS bugs that can crash CI/CD services — and strongly urges immediate updates to avoid stealthy account compromise or disruptive outages.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.