The Hacker NewsSep 12, 2024criticalUrgent: GitLab Patches Critical Flaw Allowing Unauthorized Pipeline Job ExecutionExploitedcve-2024-6678cve-2023-50093
Security AffairsMay 24, 2024highAn XSS flaw in GitLab allows attackers to take over accountsExploited2 min readcve-2024-4835cve-2023-702812
The RecordMay 2, 2024highOrganizations patch CISA KEV list bugs 3.5 times faster than others, researchers findExploited5 min readcve-2024-29988cve-2024-214127
Ars Technica · SecurityMay 2, 2024highMaximum-severity GitLab flaw allowing account hijacking under active exploitationExploited2 min readcve-2023-7028exploit5
Security AffairsMay 2, 2024highCISA adds GitLab flaw to its Known Exploited Vulnerabilities catalogExploited2 min readcve-2023-7028exploit6
The Hacker NewsMay 2, 2024criticalCISA Warns of Active Exploitation of Severe GitLab Password Reset VulnerabilityExploited2 min readcve-2023-7028vulnerability5
Help Net SecurityMay 2, 2024criticalCritical GitLab flaw allows account takeover without user interaction, patch quickly! (CVE-2023-7028)Exploited2 min readcve-2023-7028cve-2023-53564
The Hacker NewsJan 30, 2024criticalURGENT: Upgrade GitLab - Critical Workspace Creation Flaw Allows File Overwritecve-2024-0402cve-2023-70284
Security AffairsJan 24, 2024critical5379 GitLab servers vulnerable to zero2 min readcve-2023-7028vulnerability5
Help Net SecurityJan 14, 2024criticalWeek in review: GitLab account takeover flaw, attackers exploiting Ivanti Connect Secure zero-daysExploited6 min readcve-2023-7028cve-2024-206746
Security AffairsJan 13, 2024criticalGitLab fixed a critical zero2 min readcve-2023-7028cve-2023-53565
The Hacker NewsJan 12, 2024criticalUrgent: GitLab Releases Patch for Critical Vulnerabilitiescve-2023-7028cve-2023-53565