Skip to main content
Apexward Pulse
3 reportsPriority Medium

GitLab SSRF and Adobe Acrobat vulnerabilities

A GitLab server-side request forgery vulnerability and an Adobe Acrobat use-after-free vulnerability are reported to be exploited in the wild, posing risks to UK organisations using these products.

First report Latest

What is going on

  • A GitLab server-side request forgery vulnerability was reported with exploitation in the wild according to the CISA Known Exploited Vulnerabilities catalogue.
  • An Adobe Acrobat use-after-free vulnerability is also reported to be exploited in the wild with a CVE listed in authoritative known-exploited catalogues.
  • GitLab released updated versions to address a separate integer overflow or wraparound vulnerability affecting merge request pages when the Ona integration is enabled.
  • The vulnerabilities highlight ongoing security concerns for organisations using GitLab and Adobe Acrobat products.
  • The timeline shows multiple vulnerabilities reported across different dates with exploitation claims for some of them.

Reports in this story

Newest first. Each one is a separate event with its own sources and evidence.

Back to the feed