A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You

The private email address GitLab gives you for filing issues by email is a credential. Anyone who gets it can email a patch that GitLab commits in your name, to any branch you can push to, including m

原文标题：A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You

信源：The Hacker News ｜ 阅读原文

The private email address GitLab gives you for filing issues by email is a credential. Anyone who gets it can email a patch that GitLab commits in your name, to any branch you can push to, including main, and can start CI/CD jobs that run as you. GitLab shows

—— 开源情报自动采集 · 综合