78
Google Chrome and GitLab Vulnerability: India’s cyber security agency CERT-In (Indian Computer Emergency Response Team) has issued an important warning for internet users and developers across the country. The agency has said that many serious security vulnerabilities have been found in the desktop version of Google Chrome and the GitLab platform. By taking advantage of these vulnerabilities, cyber criminals can attack users’ systems, steal sensitive data, or run arbitrary code on the device.
What is said in CERT-In’s warning?
According to CERT-In, the severity of these vulnerabilities is so high that any remote attacker would only have to send a specially crafted website or link, and as soon as the user clicks, their system could be affected. The agency has also clarified that both Google and GitLab companies have released security patches and updates, so all users should install them immediately so that their data and system remains safe.
Technical flaws found in Google Chrome
According to the report of CERT-In, many technical errors have been found in the desktop version of Google Chrome, the biggest problem of which is to its JavaScript engine (V8 Engine). This engine is the main part of running code on websites.
These flaws mainly include –
- Use After Free errors – in PageInfo, Ozone and Storage components
- Policy Bypass Vulnerabilities – in Chrome Extensions
- Out of Bounds Read issue – in V8 and WebXR module
Misuse of any of these vulnerabilities can seriously impact both the performance and security of the browser. Hackers can take advantage of these vulnerabilities to access users’ personal information or run their code on the system.
Vulnerabilities found in GitLab platform
CERT-In has found some serious vulnerabilities in both the Community and Enterprise Editions of GitLab. These problems are mainly to Access Control Management, that is, the system was not able to properly control which user could access which feature.
Due to these weaknesses:
- Application testing tools and software verification systems may be affected.
- Any hacker can bypass the security layer.
- The system may crash or become temporarily unavailable to users.
What is the advice for users?
CERT-In has advised all Chrome and GitLab users to update their software immediately. Also, avoid clicking on any unknown websites, links or email attachments, as these are the most common tactics of cyber attacks. Regular updates and vigilance are the most effective way to avoid these vulnerabilities. Users who do not update their software in time, their systems can become easy targets for cyber attacks.
