66 点作者 altharaz大约 3 年前

2 条评论

thcipriani大约 3 年前

To save folks some digging on what exactly this means—it's exactly what it sounds like: <a href="https://gitlab.com/gitlab-org/gitlab/-/commit/e2fb87ec5d4e235d6b83454980cec9c049849a1c#f4d654b98cc11d931e3f77ee61318adc95a52f12" rel="nofollow">https://gitlab.com/gitlab-org/gitlab/-/commit/e2fb87ec5d4e23...</a>

评论 #30876409 未加载

评论 #30875039 未加载

krebsonsecurity大约 3 年前

This appears to be related. One Github user shared an alert they got today, two days after connecting their Github account to Gitlab. Something about an app added to the account. Their Github has 2fa turned on and a very strong password:<p><a href="https://twitter.com/briankrebs/status/1509910113716514822" rel="nofollow">https://twitter.com/briankrebs/status/1509910113716514822</a>

Gitlab – Static passwords set during OmniAuth-based registration (CVE-2022-1162)

2 条评论

Gitlab – Static passwords set during OmniAuth-based registration (CVE-2022-1162)

2 条评论