TechnologyExposed GitLab project email addresses reportedly let attackers push code
BleepingComputer reports that private GitLab email addresses for submitting project issues or tasks are being deliberately exposed in READMEs, contributing guides and support pages used to collect bug reports.
TLDR
BleepingComputer reports that exposed GitLab project email addresses let attackers push code. The private addresses allow developers to submit issues or tasks to a project, but are being deliberately exposed in READMEs, contributing guides and support pages used to collect bug reports.
Exposed GitLab project email addresses reportedly let attackers push code
BleepingComputer reports that private GitLab email addresses for submitting project issues or tasks are being deliberately exposed in READMEs, contributing guides and support pages used to collect bug reports.
TLDR
BleepingComputer reports that exposed GitLab project email addresses let attackers push code. The private addresses allow developers to submit issues or tasks to a project, but are being deliberately exposed in READMEs, contributing guides and support pages used to collect bug reports.