Back to overview

CVE-2023-7028

CRITICAL KEV CISA Exploitation: ACTIVE
10.0
CVSS 3.1
Description
An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account password reset emails could be delivered to an unverified email address.

Metadata

CVE ID
CVE-2023-7028
State
PUBLISHED
Assigner
GitLab
Reserved
2023-12-20 20:30 UTC
Published
2024-01-12 13:56 UTC
Last updated
2026-05-26 04:05 UTC
Primary CWE
CWE-640
CWE-640: Weak Password Recovery Mechanism for Forgotten Pass…
Vendor / Product
GitLab / GitLab
Sources
cve.org  ·  NVD

Severity & Metrics

10.0 CRITICAL CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
SSVC — CISA Coordinator
Exploitation
ACTIVE
Automatable
yes
Tech. Impact
total
CISA Known Exploited Vulnerability
Vulnerability name
GitLab Community and Enterprise Editions Improper Access Control Vulnerability
Vendor
GitLab
Product
GitLab CE/EE
Added to KEV
2024-05-01
Due date
2024-05-22
Ransomware
Not known
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CISA description
GitLab Community and Enterprise Editions contain an improper access control vulnerability. This allows an attacker to trigger password reset emails to be sent to an unverified email address to ultimately facilitate an account takeover.
Affected products (1)
VendorProductPlatformVersions
GitLab GitLab — 16.1 < 16.1.6, 16.2 < 16.2.9, 16.3 < 16.3.7, 16.4 < 16.4.5 …
Weakness (CWE)
CWESourceDescription
CWE-640 cna CWE-640: Weak Password Recovery Mechanism for Forgotten Password
CVSS scores (1)
ScoreSeverityVersionSourceVector
10.0 CRITICAL 3.1 cna CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
References (2)
Back to overview