Federal frenzy to patch gaping GitLab account takeover hole

May 2, 2024 TH Author

Warning comes exactly a year after the vulnerability was introduced

The US Cybersecurity and Infrastructure Security Agency (CISA) is forcing all federal agencies to patch a critical vulnerability in GitLab’s Community and Enterprise editions, confirming it is very much under “active exploit.”…