Monday, June 17, 2024
  1. You Are At:
  2. News
  3. Technology
  4. CERT-In identifies numerous bugs in Google Chrome and GitLab

CERT-In identifies numerous bugs in Google Chrome and GitLab

CERT-In has cautioned users regarding numerous vulnerabilities present in Google Chrome and GitLab. These vulnerabilities could potentially allow attackers to access sensitive information, bypass security measures, and trigger denial-of-service (DoS) situations on the affected system.

Edited By: Saumya Nigam @snigam04 New Delhi Published on: May 05, 2024 12:52 IST
CERT-In, Google Chrome, GitLab
Image Source : FILE CERT-In discovers several vulnerabilities in Google Chrome and GitLab

The Indian Computer Emergency Response Team (commonly known by CERT-In), which comes under the Ministry of Electronics & Information Technology, has warned users about multiple vulnerabilities in Google Chrome and GitLab (an open-core company) which could enable an attacker to obtain sensitive information, bypassing security restriction and cause denial-of-service (DoS) conditions on the targeted system.

The affected software includes Chrome versions before 124.0.6367.118/.119 for Mac and Windows and Chrome versions before 124.0.6367.118 for Linux.

For GitLab, the affected software includes -- GitLab Community Edition (CE) and Enterprise Edition (EE) versions before 16.11.1, 16.10.4 and 16.9.6.

The CERT-In advisory said, "Multiple vulnerabilities have been reported in Google Chrome which could be exploited by a remote attacker to trigger remote code execution and DoS conditions on the targeted system.”

As per the cyber agency, these vulnerabilities exist in Google Chrome due to the use-after-free flaw in Dawn and Picture in Picture components.

On the other hand, multiple vulnerabilities such as authentication bypass vulnerability, security restriction bypass, and denial of service exist in GitLab due to improper authentication mechanisms, flaws in handling domain-based restrictions when processing crafted email addresses, path traversal vulnerability and an inefficient regular expression, respectively.

As mentioned by the cyber agency, an attacker could use "these vulnerabilities by persuading a victim to visit a specially crafted website."

The agency suggested users apply appropriate security updates as mentioned by the companies.

Also read Android 15 to come with an anti-theft feature: How does it work?

Google is reportedly working on the new Android 15 operating system which has been scheduled to make a debut at the upcoming Google I/O 2024 event. The event will take place in May 2024 and the tech player has promised to upgrade the security of smartphones with several new enhanced features especially focusing on the rising trend of artificial intelligence. 

Also, Google announced the update on the Find My Device for Android users and explained five ways to use the platform, which will benefit a million users. With the new feature, the Android users will be stress-free as the device tracking will be easy.

Inputs from IANS




Read all the Breaking News Live on and Get Latest English News & Updates from Technology