The Hacker News
@TheHackersNews
The #1# trusted source for cybersecurity news, insights, and analysis — built for defenders and trusted by decision-makers.
가입 October 2010
2K 팔로잉 중 2.4M 팬
‼️ You can commit code to a GitLab repo by emailing it.
Every GitLab user gets a private address for filing issues. Hidden inside is a non-expiring account token. If that address leaks, someone can send a patch that GitLab commits as you and, with your permissions, target main or trigger CI/CD.
Incoming email also bypasses 2FA and IP restrictions.
Read:
더 보기
