GitLab patches CVSS 10.0 flaw allowing unauthenticated code execution

GitLab has released patches for a maximum-severity CVSS 10.0 vulnerability affecting Community Edition and Enterprise Edition. Under certain conditions, an unauthenticated user could execute arbitrary code on the GitLab server via a specially crafted regular expression in CI/CD.

• Flaw rated CVSS 10.0, the maximum severity level
• Affects GitLab Community Edition and Enterprise Edition
• Exploitable without authentication via a CI/CD regular expression
• Patches released; admins urged to update