GitLab

GitLab inbound email issue notification

Mar 6, 2018Jim Thavisouk
GitLab inbound email issue notification
SummaryAI, from the source post

This post details a security vulnerability where the `@gitlab.com` domain used for the "create new issues via email" feature could be abused by attackers. It outlines customer remediation steps to update email aliases and whitelisting to `@incoming.gitlab.com` and GitLab's strategy to update addresses and disable old ones. This is a security hardening measure for an existing feature.

More from the GitLab Secrets Manager trail