Endpoint VulnerabilityGitLab CVE-2023-7028 Access Control Bypass Vulnerability
Description
GitLab CE/EE versions 16.1-16.7 (pre-patch) can send password-reset emails to unverified addresses, enabling attackers to reset accounts and gain unauthorized access.
Affected Applications
GitLab
Version Updates
| ID | 5551 |
| Created | Jan 15, 2024 |
| Description Updated |
Mar 07, 2026 |
| CVE ID | |
| Tags | Threat Signal |
| Risk |
|
| Coverage | FortiClient |
| OS | Linux |
| Vendor | GitLab Inc. |
| Patch | manual |
| Application | GitLab |