1 min read News

GitLab has released a patch for the critical RCE vulnerability CVE-2022-2884 (CVSS 9.9), which allows an authorized hacker to remotely execute code on a device via GitLab Import API.

GitLab has released a patch for the critical RCE vulnerability CVE-2022-2884 (CVSS 9.9), which allows an authorized hacker to remotely execute code on a device via GitLab Import API.
Photo by Pankaj Patel / Unsplash

The vulnerability affects GitLab Community Edition (CE) and Enterprise Edition (EE).

GitLab encourages users to promptly install updates to affected versions. For those who are unable to update the firmware, an alternative has been provided. The platform recommended to disable the GitLab import feature in the "Visibility and Access Control" tab of the "Settings" menu after authenticating as an administrator.

You might also like...

Nov
13
Bitcoin Faces Potential Pullback After Rapid Surge

Bitcoin Faces Potential Pullback After Rapid Surge

Cryptocurrency experts have voiced concerns about the sustainability of Bitcoin’s recent price surge, warning that the current impulsive momentum
2 min read
Nov
07
Canada Orders Closure of TikTok Offices Amid National Security Concerns, Yet App Remains Accessible

Canada Orders Closure of TikTok Offices Amid National Security Concerns, Yet App Remains Accessible

The Canadian government has directed TikTok to shut down its offices across the country, citing national security risks tied to
2 min read
Nov
05
Meta Extends Ban on Political Ads Post-Election in the U.S.

Meta Extends Ban on Political Ads Post-Election in the U.S.

Meta has announced that new political ads will be restricted on Facebook and Instagram following Election Day in the United
1 min read
Oct
31
Better Collective Faces 42% Stock Drop, Prompting Closure of U.S. and Swedish Dust2 Portals

Better Collective Faces 42% Stock Drop, Prompting Closure of U.S. and Swedish Dust2 Portals

The share price of Better Collective, the company behind HLTV and Dust2 portals, plummeted by 42% in the past week,
1 min read
Oct
29
Ubisoft Does Not Plan to Add Ukrainian Localization to Future Games – Here’s Why

Ubisoft Does Not Plan to Add Ukrainian Localization to Future Games – Here’s Why

In a recent interview with Forbes Ukraine, Olga Senzuk, Managing Director of Ubisoft’s Ukrainian branch, clarified that the company
1 min read
GrowthNowGeek © 2024