March 15, 2024, 6:20 p.m. | Zachary Goldman

Rapid7 Blog blog.rapid7.com

New module content (3)


GitLab Password Reset Account Takeover


Authors: asterion04 and h00die

Type: Auxiliary

Pull request: #18716 contributed by h00die

Path: admin/http/gitlab_password_reset_account_takeover

AttackerKB reference: CVE-2023-7028


Description: This adds an exploit module that leverages an account-take-over vulnerability to take control of a GitLab account

account account takeover admin authors contributed control cve exploit gitlab http metasploit metasploit weekly wrapup password password reset path reference request reset takeover vulnerability wrap-up

SOC 2 Manager, Audit and Certification

@ Deloitte | US and CA Multiple Locations

Director, Cybersecurity - Governance, Risk and Compliance (GRC)

@ Stanley Black & Decker | New Britain CT USA - 1000 Stanley Dr

Information Security Risk Metrics Lead

@ Live Nation Entertainment | Work At Home-Connecticut

IT Product Owner - Enterprise DevSec Platform (d/f/m)

@ Airbus | Hamburg - Finkenwerder

Senior Information Security Specialist

@ Arthur Grand Technologies Inc | Arlington, VA, United States

Information Security Controls SME

@ Sword | Aberdeen, Scotland, United Kingdom