Over 5,300 Gitlab servers exposed to zero-click account takeover attacksbleepingcomputer.com 3 pointsrakkhi2 years ago1 commentSaveHideCopy link On HNComments−rakkhiOP2yCVSS 10... does not bypass MFA though at least. Still sucks for those who went the hosted option over SaaS.
Comments
CVSS 10... does not bypass MFA though at least. Still sucks for those who went the hosted option over SaaS.