HighCVE
CISA says max severity GitLab flaw now exploited in the wild
BleepingComputer·Source published ·1 min read
What happened?
Attackers have started exploiting a maximum-severity GitLab vulnerability patched earlier this month, according to the US Cybersecurity and Infrastructure Security Agency (CISA). [...]
Key details
- CISA confirmed active exploitation of a maximum-severity GitLab vulnerability and added it to the Known Exploited Vulnerabilities Catalog.
- Remote attackers can execute arbitrary code via a maliciously crafted regular expression in a CI/CD configuration.
- GitLab patched the issue in Community Edition and Enterprise Edition versions 19.4.2, 19.3.5, and 19.2.8.
- CISA ordered federal agencies to secure their servers by Sunday under Binding Operational Directive 26-04.
- Shadowserver tracks nearly 2,800 Internet-exposed GitLab Community Edition instances.
- This is the latest in a series of GitLab vulnerabilities addressed since the start of the year, including other maximum-severity flaws.
Affected
- GitLab Community Edition (CE) and Enterprise Edition (EE) versions prior to 19.4.2, 19.3.5, and 19.2.8.
Summarised by SecOraLens from BleepingComputer. Always read the original source before acting. How SecOraLens verifies advisories.