CVE Watch—

CVE-2023-7028

GitLab Community and Enterprise Editions Improper Access Control Vulnerability

CVSS

—

Sem CVSS

EPSS

94.5%

p100

KEV

SIM

1 de mai. de 2024

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

94.5%EPSS · 30 dias94.6%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

GitLab / GitLab CE/EE

Vulnerabilidade

GitLab Community and Enterprise Editions Improper Access Control Vulnerability

Adicionado ao KEV

1 de mai. de 2024

Corrigir até

22 de mai. de 2024

Uso conhecido em ransomware

Não

Descrição resumida

GitLab Community and Enterprise Editions contain an improper access control vulnerability. This allows an attacker to trigger password reset emails to be sent to an unverified email address to ultimately facilitate an account takeover.

Ação necessária

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://about.gitlab.com/releases/2024/01/11/critical-security-release-gitlab-16-7-2-released/ ; https://nvd.nist.gov/vuln/detail/CVE-2023-7028

CVEs relacionados

Nenhum CVE relacionado por CWE ou produto.