Secuno
ENNL
Book demo

CVE-2023-7028

GitLab Community and Enterprise Editions Improper Access Control

10.0 CRITICALActively exploited (CISA KEV)Public exploitEPSS 94.6%
  1. Published12 Jan 2024
  2. Added to CISA KEV1 May 2024
  3. Remediation due22 May 2024
Actively exploited (CISA KEV)

GitLab Community and Enterprise Editions contain an improper access control vulnerability. This allows an attacker to trigger password reset emails to be sent to an unverified email address to ultimately facilitate an account takeover.

Added to KEV: 1 May 2024Federal remediation due: 22 May 2024

Description

An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account password reset emails could be delivered to an unverified email address.

CVSS 3.1 breakdown

Attack vectorNetwork
Attack complexityLow
Privileges requiredNone
User interactionNone
ScopeChanged
ConfidentialityHigh
IntegrityHigh
AvailabilityNone
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

Affected products

GitLab≥ 16.1.0 < 16.1.6 · ≥ 16.2.0 < 16.2.9 · ≥ 16.3.0 < 16.3.7 · ≥ 16.4.0 < 16.4.5

Remediation

Fixed in
GitLab≥ 16.1.6

References

Related CVEs

Recent high-severity vulnerabilities sharing a weakness type.

CVE-2026-1076409.1
Integrics Enswitch 3.13 through 4.4 contains an authentication bypass vulnerability in…
CVE-2026-192189.1
Weak Password Recovery Mechanism for Forgotten Password vulnerability in AKIN Software…
CVE-2026-539539.1
GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the…
CVE-2026-1021159.8
Kiteworks Core did not correctly validate a parameter submitted to the password reset…
CVE-2026-1011888.3
A security vulnerability has been detected in Netcore POWER13 2.0.240730.162638. This…
CVE-2026-1008708.8
Sylius versions before 1.12.25, 1.13.17, 1.14.20, 2.1.16, and 2.2.9 build administrator…

Frequently asked

Is CVE-2023-7028 being actively exploited?

Yes. CVE-2023-7028 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added 1 May 2024.

How severe is CVE-2023-7028?

CVE-2023-7028 has a CVSS 3.1 base score of 10.0, rated critical. EPSS estimates a 94.6% probability of exploitation.

Which products are affected by CVE-2023-7028?

Affected products include GitLab.

How do I fix CVE-2023-7028?

Upgrade affected software to a fixed version, for example GitLab 16.1.6 or later, then confirm no affected versions remain in your inventory.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2023-7028 against the real software inventory on every managed device, every day. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. Because it is on the CISA KEV list, Secuno flags any affected asset as top-priority automatically. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation worksBook a demo

Get Patch this first every Monday

Five vulnerabilities that matter this week, ranked on real exploitation. Plain language, one email, no spam.

You can unsubscribe with one click from every issue. We handle your details as described in our privacy policy.

Data from the NVD, CISA KEV catalog and FIRST EPSS. CVSS 3.1 base score shown where available.