OpenTrojan Intelligence Infrastructure
Search intelligence, CVEs, threats… Search
Ask AI Analyst API
English中文
Enter Portal

CVE-2023-7028: GitLab CE/EE Account Takeover via Password Reset

CRITICAL CVSS 10 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CWE-640 CISA KEV · Known exploited

Published 2024-01-11T00:00:00.000 Updated 2026-10-27T00:00:00.000

Summary

GitLab Community and Enterprise Edition allow account takeover via crafted password reset emails sent to arbitrary addresses.

Why It Matters

CRITICAL severity — known to be exploited in the wild（CISA KEV）；action required: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. ；affects GitLab CE/EE 16.1.0 to 16.1.5, GitLab CE/EE 16.2.0 to 16.2.7, GitLab CE/EE 16.3.0 to 16.3.4 and more.

Risks left unpatched can lead to remote code execution, data exposure or lateral movement — verify exposure against the affected software below.

Current Status

  • Vulnerability status: Known exploited (CISA KEV)
  • Last intelligence update: 2026-10-27 · source: NVD
  • CISA KEV added: 2024-05-01 · remediation deadline: 2024-05-22

Entity Activity Timeline

  1. 2024-05-01 — Added to CISA KEV as known-exploited · action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
  2. 2024-01-11 — NVD publication / disclosure
  3. 2026-10-27 — Intelligence record updated（NVD sync）

Severity

CRITICAL

CVSS Score: 10

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Known Exploited (CISA KEV)

Known Exploited Vulnerability

Added: 2024-05-01 · Remediation deadline: 2024-05-22

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Source Attribution

Source: NVD · Updated: 2026-10-27T00:00:00.000 · Confidence: high

Impact

Based on CVSS vector: AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H — assess confidentiality, integrity, and availability impact via the official vector documentation.

Affected Software

  • GitLab CE/EE 16.1.0 to 16.1.5 (Unknown)
  • GitLab CE/EE 16.2.0 to 16.2.7 (Unknown)
  • GitLab CE/EE 16.3.0 to 16.3.4 (Unknown)
  • GitLab CE/EE 16.4.0 to 16.4.2 (Unknown)
  • GitLab CE/EE 16.5.0 to 16.5.5 (Unknown)
  • GitLab CE/EE 16.6.0 to 16.6.1 (Unknown)
  • GitLab CE/EE 16.7.0 (Unknown)

Fix

Upgrade affected software to the fixed version identified above. Apply vendor patches and monitor advisories before exposed systems go unpatched.

Sources & Evidence

2 reference(s) · attribution: NVD

Related Intelligence

Curated links only — no machine-generated relationships.

Investigate this vulnerability Ask AI about this CVE Research background

Export threat intelligence

Download an OASIS STIX 2.1 threat-intelligence bundle (JSON) for MISP / OpenCTI / TAXII import

Start Investigation

Move from reading to investigating CVE-2023-7028: GitLab CE/EE Account Takeover via Password Reset. The workspace is a structured analysis surface — not a chat — organised as:

  1. Question — what do you need to know about CVE-2023-7028: GitLab CE/EE Account Takeover via Password Reset?
  2. Evidence — assertions mapped to verifiable references.
  3. Timeline — events in chronological order.
  4. Related Entities — CVE, threat actor, campaign, malware links.
  5. Sources — NVD, CISA KEV, MITRE ATT&CK, vendor advisories.
  6. Notes — your own observations and working hypotheses.

AI assistance is limited to summarising, explaining, and suggesting related evidence. AI never completes your investigation, modifies entity relationships, or generates facts — all published analysis stays human-reviewed.

Start Investigation Open Workspace

Recommended Tools

  • CVE Lookup Open the full CVE record — severity, CVSS, affected products, CISA KEV and references. Open CVE record

Every tool runs passively or locally — inputs are never stored and no target is scanned. Start an investigation on this entity →