GitLab Hackers Use 'Forgot Your Password' to Hijack Accounts

US CISA Orders Federal Agencies to Apply January Patch
The U.S. federal government's cybersecurity agency warned that hackers are exploiting a vulnerability in DevOps platform GitLab that was patched in January. The vulnerability allows hackers to use the "forgot your password" function to send a reset link to an attacker-controlled inbox.

accounts agency attacker cisa cybersecurity devops exploiting federal federal agencies federal government function gitlab government hackers hijack january link password platform reset send us cisa vulnerability