GitLab servers are being exploited in DDoS attacks (The Record)

The Record is reportingon massive exploitation of an oldish vulnerability in GitLab instances.

While the purpose of these attacks remained unclear for HNSecurity, yesterday, Google's Menscher said the hacked servers werepart of a botnet comprising of thousands of compromised GitLabinstances" that was launching large-scale DDoS attacks.

The vulnerability was fixedin April, but evidently a lot of sites have not updated.