⚠ Actively exploited
Added to CISA KEV on 2024-05-01. Federal agencies required to patch by 2024-05-22. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable..

CVE-2023-7028Weak Password Recovery Mechanism for Forgotten Password in Gitlab

Severity
9.8CRITICALNVD
VulnCheck10.0
EPSS
93.5%
top 0.17%
CISA KEV
KEV
Added 2024-05-01
Due 2024-05-22
Exploit
Exploited in wild
Active exploitation observed
Timeline
PublishedJan 12
KEV addedMay 1
KEV dueMay 22
Latest updateFeb 26
CISA Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Description

An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account password reset emails could be delivered to an unverified email address.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages5 packages

CVEListV5gitlab/gitlab16.116.1.6+6
NVDgitlab/gitlab16.1.016.1.6+6
debiandebian/gitlab< gitlab 16.4.5+ds2-1 (sid)
gitlabgitlab/gitlab

🔴Vulnerability Details

3
GHSA
GHSA-mgg5-84cv-fc3c: An issue has been discovered in GitLab CE/EE affecting all versions from 162024-01-12
OSV
CVE-2023-7028: An issue has been discovered in GitLab CE/EE affecting all versions from 162024-01-12
VulnCheck
GitLab Community and Enterprise Editions Improper Access Control Vulnerability2023

💥Exploits & PoCs

3
Exploit-DB
GitLab CE/EE < 16.7.2 - Password Reset2024-03-14
Metasploit
GitLab Password Reset Account Takeover
Nuclei
GitLab - Account Takeover via Password Reset

🔍Detection Rules

1
Suricata
ET WEB_SPECIFIC_APPS Gitlab Account Takeover Attempt (CVE-2023-7028)2024-01-16

📋Vendor Advisories

3
CISA
GitLab Community and Enterprise Editions Improper Access Control Vulnerability2024-05-01
GitLab
CVE-2023-7028: An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior2024-01-12
Debian
CVE-2023-7028: gitlab - An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 pr...2023

🕵️Threat Intelligence

11
Greynoiseio
GreyNoise Detects Active Exploitation of CVEs Mentioned in Black Basta’s Leaked Chat Logs2025-02-26
Qualys
Defense Lessons From the Black Basta Ransomware Playbook2025-02-25
Qualys
Defense Lessons From the Black Basta Ransomware Playbook | Qualys2025-02-25
Bleepingcomputer
High-severity GitLab flaw lets attackers take over accounts2024-05-23
Bleepingcomputer
CISA says GitLab account takeover bug is actively exploited in attacks2024-05-01

📄Research Papers

2
arXiv
Efficacy of EPSS in High Severity CVEs found in KEV2024-11-04
arXiv
Microservice Vulnerability Analysis: A Literature Review with Empirical Insights2024-07-31