CyberSec.Space Logo
Back to CVE Browser

CVE-2023-7028

🔥 Known Exploited (CISA KEV)CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2024-01-12
Last Modified2026-06-17
Data SourcesNVDCISA KEV

Vulnerability Description

An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account password reset emails could be delivered to an unverified email address.

Affected Platforms (CPE)

📦
Gitlab

Gitlab

>= 16.1.0 and < 16.1.6>= 16.2.0 and < 16.2.9>= 16.3.0 and < 16.3.7>= 16.4.0 and < 16.4.5>= 16.5.0 and < 16.5.6>= 16.6.0 and < 16.6.4>= 16.7.0 and < 16.7.2

References & Advisories

🔗 https://gitlab.com/gitlab-org/gitlab/-/issues/436084
🔗 https://hackerone.com/reports/2293343
🔗 https://gitlab.com/gitlab-org/gitlab/-/issues/436084
🔗 https://hackerone.com/reports/2293343
🔗 https://www.vicarius.io/vsociety/posts/critical-gitlab-account-takeover-vulnerability-cve-2023-7028
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-7028

Related Security Intelligence Articles

Global Cyber Intel Digest: July 21, 2026

Comprehensive breakdown of critical vulnerability advisories across VMware vCenter, F5 BIG-IP, and GitLab platforms, alongside threat actor reconnaissance trends and ransomware response strategies.

2026-07-21

Related Vulnerabilities

CVE-2026-614628.6

mcp-gitlab contains a path traversal vulnerability in the job_id parameter of build/index.js that allows attackers to redirect Git...

CVE-2026-84724.3

GitLab has remediated an issue in GitLab EE affecting all versions from 18.9 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 1...

CVE-2026-74924.3

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.1 before 18.11.7, 19.0 before 19.0.4, and 19.1 before...

CVE-2026-68968.7

GitLab has remediated an issue in GitLab EE affecting all versions from 13.11 before 18.11.7, 19.0 before 19.0.4, and 19.1 before ...