GitLab Multiple Vulnerabilities

Multiple vulnerabilities were identified in GitLab. A remote attacker could exploit some of these vulnerabilities to trigger data manipulation, elevation of privilege and security restriction bypass on the targeted system.

[Updated on 2024-05-02]

CVE-2023-7028 is being exploited in the wild. The vulnerabilities is due to an improper access control weakness that can allow remote unauthenticated threat actors to send password reset emails to email accounts under their control to change the password and hijack targeted accounts without user interaction.