SecurityThe Hacker Newsabout 3 hours ago
GitLab RCE PoE Exploits Authenticated Users
1 min read
Security researcher Yuhang Wu published a proof-of-concept exploit for GitLab 18.11.3 that lets authenticated users execute commands as git by committing two crafted Jupyter notebooks and requesting their diff. The chain requires no admin rights or victim interaction.
Level
Hype check
Tap to vote and see what everyone thinks.
