4 ms·
Very proud of our security team for the responsive communication and ensuring the issue is made public https://gitlab.com/gitlab-org/gitlab-ce/issues/54189#note
by sytse 8y ago
Very proud of our security team for the responsive communication and ensuring the issue is made public https://gitlab.com/gitlab-org/gitlab-ce/issues/54189#note_128763324 https://gitlab.com/gitlab-org/gitlab-ce/issues/54189#note_12...
- deleted 8y ago[deleted]
- jakejarvis 8y agoIndeed, fantastic job! Credit where credit's due to HackerOne co-founder jobert, too. Seems he's made a decent living [0] out of making GitLab more secure. On the flipside, as a GitLab user, I'm glad to see you guys are so generous with bounties to encourage more detailed (and fascinating) reports like these. :) [0] https://hackerone.com/jobert?order_direction=DESC&order_field=popular&filter=type%3Abounty-awarded https://hackerone.com/jobert?order_direction=DESC&order_fiel...
- kerng 8y agoAppreciate the transparency. Was there any evidence of exploitation found? At least the researcher should have been identified as true positive compromising their own account to ensure post mortem investigation was correct and no other customers were impacted/exploited by a real adversary.