Synthèse
Private GitLab email addresses that allow developers to push issues or tasks to a project are being deliberately exposed in READMEs, contributing guides, and support pages used to collect bug reports.
Private GitLab email addresses that allow developers to push issues or tasks to a project are being deliberately exposed in READMEs, contributing guides, and support pages used to collect bug reports.
Source originale
bleepingcomputer.com
GitLab Email Addresses Can Be Weaponized for Supply Chain Attacks ↗
darkreading.com · 23 sept.
A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You ↗
thehackernews.com · 23 sept.
CORTEX