New Delhi, May 5<\/p>\n\n\n\n
The Indian Computer Emergency Response Team (CERT-In), which comes under the Ministry of Electronics & Information Technology, has warned users of multiple vulnerabilities in Google Chrome and GitLab (an open-core company) which could allow an attacker to obtain sensitive information, bypass security restriction and cause denial-of-service (DoS) conditions on the targeted system.<\/p>\n\n\n\n
The affected software includes Chrome versions before 124.0.6367.118\/.119 for Mac and Windows and Chrome versions prior to 124.0.6367.118 for Linux.<\/p>\n\n\n\n
For GitLab, the affected software includes — GitLab Community Edition (CE) and Enterprise Edition (EE) versions before 16.11.1, 16.10.4 and 16.9.6.<\/p>\n\n\n\n
“Multiple vulnerabilities have been reported in Google Chrome which could be exploited by a remote attacker to trigger remote code execution and DoS conditions on the targeted system,” said the CERT-In advisory.<\/p>\n\n\n\n
According to the cyber agency, these vulnerabilities exist in Google Chrome due to the use-after-free flaw in Dawn and Picture in Picture components.<\/p>\n\n\n\n
On the other hand, multiple vulnerabilities such as authentication bypass vulnerability, security restriction bypass, and denial of service exist in GitLab due to improper authentication mechanisms, flaws in handling domain-based restrictions when processing crafted email addresses, path traversal vulnerability and an inefficient regular expression, respectively.<\/p>\n\n\n\n
As mentioned by the cyber agency, an attacker could use “these vulnerabilities by persuading a victim to visit a specially crafted website.”<\/p>\n\n\n\n
AGENCIES<\/p>\n","protected":false},"excerpt":{"rendered":"
New Delhi, May 5 The Indian Computer Emergency Response Team (CERT-In), which comes under the Ministry of Electronics & Information Technology, has warned users of multiple vulnerabilities in Google Chrome and GitLab (an open-core company) which could allow an attacker to obtain sensitive information, bypass security restriction and cause denial-of-service (DoS) conditions on the targeted […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"footnotes":"","_jetpack_memberships_contains_paid_content":false,"jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false}}},"categories":[1],"tags":[],"jetpack_publicize_connections":[],"yoast_head":"\n