Critical GitLab Flaw Lets Attackers Hijack User Pipelines

Threat Level – Amber | Vulnerability Report
Download PDF

GitLab has issued a warning about a critical vulnerability in its GitLab Community and Enterprise editions. This flaw, identified as CVE-2024-6385, allows attackers to run pipeline jobs as any other user. The vulnerability has been patched in the latest security update released and carries a CVSS base score severity rating of 9.6 out of 10.

What’s new on HivePro

Get through updates and upcoming events, and more directly in your inbox