The US Cybersecurity and Infrastructure Security Agency (CISA) has labeled a critical vulnerability affecting GitLab as a Known Exploited Vulnerability (KEV), emphasizing the urgency for security updates.
GitLab's disclosed flaw (CVE-2023-7028) enables adversaries to take over user accounts through password reset emails to unverified addresses, affecting all authentication mechanisms.
Mitiga highlighted the severe impact of an attacker gaining control of a GitLab user account, potentially leading to the theft of sensitive information.
[
add
]
[
|
|
...
]