GitLab Pipeline Execution Vulnerability (CVE-2024-6678): Critical Patch Released

@www.bleepingcomputer.com //

References :

GitLab Security Releases: The official GitLab release notes for version 17.3.2, containing details about the patch.
thecyberexpress.com: The Cyber Express shares details about the GitLab critical patch updates, including the fix for CVE-2024-6678.
infosec.exchange: Post on the GitLab vulnerability that permits pipeline execution as arbitrary users.
www.bleepingcomputer.com: Report on the GitLab pipeline execution vulnerability (CVE-2024-6678).
infosec.exchange: Metacurity social post provides a roundup of critical infosec events, including the GitLab vulnerability.
thehackernews.com: GitLab on Wednesday released security updates to address 17 security vulnerabilities, including a critical flaw that allows an attacker to run pipeline jobs as an arbitrary user.
kolektiva.social: has just released patches for 17 vulnerabilities, including a critical flaw (CVE-2024-6678) with a CVSS score of 9.9/10.

NishMath