CVE-2022-1162

    2022-04-05 Tue

    1. CVE-2022-1162 Reference: https://about.gitlab.com/releases/2022/03/31/critical-security-release-gitlab-14-9-2-released/#static-passwords-inadvertently-set-during-omniauth-based-registration / https://www.bleepingcomputer.com/news/security/critical-gitlab-vulnerability-lets-attackers-take-over-accounts/ GitLab에서 공격자가 하드코딩된 암호를 통해 사용자 계정을 탈취할 수 있는 심각한 취약점이 패치되었다. Affected version GitLab Communi..