security1 publisher
A GitLab issue-email address lets any mailbox commit to main as its owner
All of a user's GitLab issue-by-email addresses carry the same account token, and Aikido Security showed that any mailbox holding one can land a commit on any branch that user can push to, main included.
Publishers:thehackernews.com
Reality
- Evidence64
- Adoption62
- Hype gap+12
- Incentives58
- Confidence63