GitLab Fixes Critical Account Takeover Vulnerability

Threat Level – Red | Vulnerability Report
Download PDF

Critical GitLab vulnerability (CVE-2023-7028) enables unauthorized users to take over the administrator account without user interaction. Exploiting password reset flaws, attackers can submit two emails, both target as well as attacker account leading to complete account takeover. Users with two-factor authentication are safe, and GitLab urges immediate updates for affected versions to mitigate the issue in email verification.

 

Threat Level – Red | Vulnerability Report

What’s new on HivePro

Get through updates and upcoming events, and more directly in your inbox