CVE-2023-7028

GitLab Community and Enterprise Editions Improper Access Control Vulnerability

Gitlab

An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account password reset emails could be delivered to an unverified email address.

12. Jan 2024

Ausgewertete Quellen

• Hersteller
  https://gitlab.com/gitlab-org/gitlab/-/issues/436084
• Hinweis
  https://www.vicarius.io/vsociety/posts/critical-gitlab-account-takeover-vulnerability-cve-2023-7028
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-7028
• CISA
  GitLab Community and Enterprise Editions Improper Access Control Vulnerability
• NVD
  CVE-2023-7028