GitLab’s non-expiring incoming email token can let a holder commit code with a user’s permissions and trigger CI/CD jobs.
The version control platform GitLab for software projects is vulnerable through several security flaws. In the worst case, attackers can compromise systems with malicious code. However, for the two ...