GitLab Password Reset Vulnerability (CVE-2023-7028)

What is the vulnerability?A critical vulnerability has been discovered in GitLab, a DevOps platform for managing software development lifecycle. A successful exploitation of the vulnerability may allow an attacker to take control of the GitLab administrator account without user interaction. CVE-2023-7028 has been given a maximum CVSS score of 10. CISA added the vulnerability on May 1st to its Known Exploited Vulnerabilities (KEV) Catalog.What is the recommended Mitigation?GitLab users are advised to update their instances to a patched version and …

account administrator attacker cisa control critical critical vulnerability cve cve-2023-7028 cvss cvss score development devops exploitation gitlab lifecycle may password password reset password reset vulnerability platform reset score software software development vulnerability what is