Five-Year-Old Bugs in a JSON Parser Open a Code Execution Hole in Self-Managed GitLab
Researchers chained two long-dormant memory-safety bugs in Ruby’s Oj JSON parser to achieve remote code execution on self-managed GitLab instances, using nothing more than an ordinary commit and a crafted Jupyter notebook diff. Patches are available and self-managed operators should upgrade immediately.
Itagora tiene in archivio titolo e sommario per la ricerca interna. Il testo completo resta sulla fonte. Il link in uscita non invia referrer.