Live
- ‘Kubera’ extends Vinayaka Chaturthi Wishes
- Rebel Star Prabhas Launches ‘Mathu Vadalara 2’ Trailer
- Dr Shiva Rajkumar launches ‘Subrahmanyaa’ first look
- ScieGen Pharmaceuticals Donates ₹1 Crore to Chief Minister’s Relief Fund for Flood Victims
- Roshan Kanakala’s ‘Mowgli’: First look revealed
- Manipur Students Protest School Closures Amid Ongoing Violence
- Rachakonda CP Sudhir Babu Inspects Ganesh Immersion Arrangements at Sarur Nagar Pond
- Senior IPS Officer CV Anand Assumes Charge as Hyderabad Police Commissioner
- India Confirms Isolated Mpox Case, Differs From WHO-Declared Global Emergency Strain
- Cyberabad Police Crack ₹4 Crore UPI Fraud Case; 13 Arrested from Rajasthan
CERT-In finds multiple bugs in Google Chrome, GitLab
The Indian Computer Emergency Response Team (CERT-In), which comes under the Ministry of Electronics & Information Technology, has warned users of multiple vulnerabilities in Google Chrome and GitLab (an open-core company) which could allow an attacker to obtain sensitive information, bypass security restriction and cause denial-of-service (DoS) conditions on the targeted system.
New Delhi : The Indian Computer Emergency Response Team (CERT-In), which comes under the Ministry of Electronics & Information Technology, has warned users of multiple vulnerabilities in Google Chrome and GitLab (an open-core company) which could allow an attacker to obtain sensitive information, bypass security restriction and cause denial-of-service (DoS) conditions on the targeted system.
The affected software includes Chrome versions before 124.0.6367.118/.119 for Mac and Windows and Chrome versions prior to 124.0.6367.118 for Linux.
For GitLab, the affected software includes -- GitLab Community Edition (CE) and Enterprise Edition (EE) versions before 16.11.1, 16.10.4 and 16.9.6.
"Multiple vulnerabilities have been reported in Google Chrome which could be exploited by a remote attacker to trigger remote code execution and DoS conditions on the targeted system," said the CERT-In advisory.
According to the cyber agency, these vulnerabilities exist in Google Chrome due to the use-after-free flaw in Dawn and Picture in Picture components.
On the other hand, multiple vulnerabilities such as authentication bypass vulnerability, security restriction bypass, and denial of service exist in GitLab due to improper authentication mechanisms, flaws in handling domain-based restrictions when processing crafted email addresses, path traversal vulnerability and an inefficient regular expression, respectively.
As mentioned by the cyber agency, an attacker could use "these vulnerabilities by persuading a victim to visit a specially crafted website."
The agency suggested users apply appropriate security updates as mentioned by the companies.
