GitLab Email Addresses Can Be Weaponized for Supply Chain Attacks

T2Covered by 1 source · first reported by Dark Reading at 23 Sept, 20:53 UTC

Incoming email addresses automatically assigned to each user on the platform contain highly privileged access tokens that attackers can use.

security

Sources

• T2GitLab Email Addresses Can Be Weaponized for Supply Chain AttacksDark Reading23 Sept, 20:53