URL has been copied successfully!
Two Old Oj Flaws Chained to Trigger GitLab Remote Code Execution
URL has been copied successfully!

Collecting Cyber-News from over 60 sources

Two Old Oj Flaws Chained to Trigger GitLab Remote Code Execution


Tags: , , ,

A newly disclosed GitLab vulnerability has revealed how two long-standing memory-safety flaws in the widely used Ruby JSON parsing library, Oj, can be combined to achieve remote code execution on default GitLab installations.

First seen on thecyberexpress.com

Jump to article: thecyberexpress.com/gitlab-vulnerability-oj-parser-rce/

Loading

Share via Email
Share on Facebook
Tweet on X (Twitter)
Share on Whatsapp
Share on LinkedIn
Share on Xing
Copy link

also interesting:

  1. Zoom and GitLab Release Security Updates Fixing RCE, DoS, and 2FA Bypass Flaws
  2. Zoom and GitLab Patch RCE, DoS, and 2FA Bypass Vulnerabilities
  3. ‘Trivial’ exploit can give attackers root access to Linux kernel
  4. GitLab RCE Flaws Allow Attackers to Execute Commands via Malicious Jupyter Notebooks