Public GitLab exploit enables command execution by authenticated project contributors

70/100

Researchers published working exploit code for a GitLab flaw patched on June 10. The report identifies unupdated self-managed 18.11.3 servers and says authenticated users with project push access can execute commands as git through a crafted Jupyter notebook; affected administrators should apply the available update.