A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-09-23 16:53 UTC
Importiert: 2026-09-30 12:08 UTC
Quelle-ID: thn_global
uid_hash: b6bb9733b16f80a0337c49a42a65aa4af7bf0ca191d4ff8ac3c5b0aa4d597f18

The Hacker News

Inhalt

The private email address GitLab gives you for filing issues by email is a credential. Anyone who gets it can email a patch that GitLab commits in your name, to any branch you can push to, including main, and can start CI/CD jobs that run as you.

GitLab shows each user this address behind a button labeled "Email work item to this project." Mail sent to it opens an issue in that project, authored

No data

Quellen-Details

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
The Hacker News	thn_global	security_news		-	de	https://feeds.feedburner.com/TheHackersNews

Zurueck zur Eintrags-Liste