Vulnerabilitycritical

Urgent: GitLab Releases Patch for Critical Vulnerabilities

The Hacker Newsby @TheHackersNewsJan 12, 2024 · 13:29 UTC (Jan 12, 2024)1 min read5

Read at thehackernews.com

Analyze CVE-2023-7028 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-7028 CVE-2023-5356

Tags: cve-2023-7028 cve-2023-5356 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-5356	Incorrect authorization checks in GitLab CE/EE from all versions starting from 8.13 before 16.5.6, all versions starting from 16.6 before 16.6.4, all versions…	8.8	<1%		Jan 12, 2024
CVE-2023-7028	Unauthenticated Account Takeover via Password Reset Flaw in GitLab CE/EE	9.8	94%	KEVPoC ×2	Jan 12, 2024 KEV May 1, 2024

From the original article

1 min read at thehackernews.com

 Ravie Lakshmanan  Jan 12, 2024 DevSecOps / Software security GitLab has released security updates to address two critical vulnerabilities, including one that could be exploited to take over accounts without requiring any user interaction. Tracked as CVE-2023-7028 , the flaw has been awarded the maximum severity of 10.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.