GitLab released security updates to address a Critical vulnerability in GitLab. Attacker can abuse scan execution policies to run pipeline as another user.

For a complete description of the vulnerabilities and affected systems go to GitLab Critical Security Release: 16.3.4 and 16.2.7

IT Security

Read more about IT Security service offerings.