Known Exploited Vulnerabilities May 01, 2024 · CISA KEV Catalog

CVE-2023-7028: Git Lab Community and Enterprise Editions Improper Access Control Vulnerability

GitLab Community and Enterprise Editions contain an improper access control vulnerability. This allows an attacker to trigger password reset emails to be sent to an unverified email address to ultimately facilitate an account takeover.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2023-7028 GitLab
Related: CVE-2026-97229: Git Lab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability Known Exploited Vulnerabilities · Oct 29, 2026
CVE-2026-85706: Git Lab Community Edition and Enterprise Edition Path Traversal Vulnerability Known Exploited Vulnerabilities · Sep 11, 2026
CVE-2021-22175: Git Lab Server-Side Request Forgery (SSRF) Vulnerability Known Exploited Vulnerabilities · Feb 18, 2026