[rwth-security] GitLab affected by GitHub-style CDN flaw allowing malware hosting

Hallo zusammen,

sofern nicht selber schon gesehen/-lesen hier [0] FYI

"GitLab affected by GitHub-style CDN flaw allowing malware hosting"

--> "... Following our investigation, however, we learned that these files—which are malware, were nowhere to be found on Microsoft's code repo.

Rather, these existed on GitHub's CDN and were likely uploaded by a threat actor who abused the platform's "comments" feature. ..."

VG

Bernd

[0] https://www.bleepingcomputer.com/news/security/gitlab-affected-by-github-sty...