CyberSecurity updates
Updated: 2024-10-14 07:21:54 Pacfic

Flag This

cyberinsider.com

GitLab Critical Security Update Addresses Multiple Vulnerabilities, Including CVE-2024-6678, CVE-2024-8640, CVE-2024-8635 and CVE-2024-8124 - 2d


Read more: cyberinsider.com

GitLab has released a critical security update addressing several vulnerabilities in its platform. These include CVE-2024-6678, CVE-2024-8640, CVE-2024-8635, and CVE-2024-8124, which are considered critical and require immediate action. Users are strongly urged to upgrade to the latest patched versions as soon as possible to prevent exploitation. The vulnerabilities could potentially lead to unauthorized access, data breaches, and other malicious activities. The update is available for versions 17.3.2, 17.2.5, and 17.1.7, and all users are encouraged to implement the patch at their earliest convenience.

References:

  • about.gitlab.com - The official GitLab release notes for version 17.3.2, containing details about the patch. - 2d
  • thecyberexpress.com - The Cyber Express shares details about the GitLab critical patch updates, including the fix for CVE-2024-6678. - 2d
  • @BleepingComputer - Post on the GitLab vulnerability that permits pipeline execution as arbitrary users. - 1d
  • www.bleepingcomputer.com - Report on the GitLab pipeline execution vulnerability (CVE-2024-6678). - 1d
  • @metacurity - Metacurity social post provides a roundup of critical infosec events, including the GitLab vulnerability. - 17h
  • thehackernews.com - GitLab on Wednesday released security updates to address 17 security vulnerabilities, including a critical flaw that allows an attacker to run pipeline jobs as an arbitrary user. - 14h
  • @youranonriots - has just released patches for 17 vulnerabilities, including a critical flaw (CVE-2024-6678) with a CVSS score of 9.9/10. - 12h

Classification:






This site is an experimental news aggregator using feeds I personally follow. You can reach me using contacts here if you have feedback. You can also find Flathis at Mastodon.