GitLab CE/EE
criticalCVSS 9.1
Account takeover through password reset emails sent to an unverified attacker-controlled address.
Dampak
Any account, including administrators, can be taken over without interaction.
Perbaikan
Upgrade to 16.7.2, 16.6.4, 16.5.6 or later and enable MFA.
Referensi resmi
https://nvd.nist.gov/vuln/detail/CVE-2023-7028Apakah situs Boss terdampak?
VulScan Pro mencocokkan versi komponen yang terdeteksi dengan CVE yang relevan, termasuk CVE-2023-7028.
Jalankan audit gratis