‼️ You can commit code to a GitLab repo by emailing it. Every GitLab user gets a private address for filing…
SAHLA Y. — Network / Web applications tester
‼️ You can commit code to a GitLab repo by emailing it.
Every GitLab user gets a private address for filing issues. Hidden inside is a non-expiring account token. If that address leaks, someone can send a patch that GitLab commits as you and, with your permissions, target main or trigger CI/CD.
Incoming email also bypasses 2FA and IP restrictions.
Read: https://thehackernews.com/2026/09/a-leaked-gitlab-issue-email-address.html
#cybernews #cybersecurity #ethicalhacking #security
3 reactions · 0 comments
Topics: #ethicalhacking, #cybernews, #security, #cybersecurity