Over 5,300 Gitlab servers exposed to zero-click account takeover attacks (bleepingcomputer.com) 3 points by rakkhi 2y ago ↗ HN
[–] rakkhi 2y ago ↗ CVSS 10... does not bypass MFA though at least. Still sucks for those who went the hosted option over SaaS.
1 comment
[ 7.5 ms ] story [ 11.8 ms ] thread