GitLab has patched a second critical vulnerability in GitLab Community Edition (CE) and Enterprise Edition (EE) that could allow attackers to run pipelines as arbitrary users. The vulnerability, tracked as CVE-2024-6385, was fixed in a critical patch release Wednesday and is similar to another flaw, CVE-2024-5655, that was patched on June 26.

Source: SC Magazine