Gitlab Critical Security Release: 16.7.2, 16.6.4, 16.5.6 (about.gitlab.com) 4 points by batch12 2y ago ↗ HN
[–] AviationAtom 2y ago ↗ Didn't get much notice from my post of it: https://news.ycombinator.com/item?id=38961910The POC is quite trivial for it:user[email][]=valid@email.com&user[email][]=attacker@email.comIt was severe enough that paid customers got a heads up to be ready to patch.
1 comment
[ 2.8 ms ] story [ 12.5 ms ] threadThe POC is quite trivial for it:
user[email][]=valid@email.com&user[email][]=attacker@email.com
It was severe enough that paid customers got a heads up to be ready to patch.