IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al
10.0Kritik KEV

CVE-2023-7028Weak Password Recovery Mechanism for Forgotten Password in GitLab

GitLab GitLab Yayım: (2 yıl önce)

Aktif olarak istismar ediliyor — GitLab Community and Enterprise Editions Improper Access Control Vulnerability

CISA bu açığın gerçek saldırılarda kullanıldığını 01.05.2024 tarihinde doğruladı. ABD federal kurumları için düzeltme son tarihi: 22.05.2024.

Gerekli işlem: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. https://about.gitlab.com/releases/2024/01/11/critical-security-release-gitlab-16-7-2-released/ ; https://nvd.nist.gov/vuln/detail/CVE-2023-7028

Açıklama

An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account password reset emails could be delivered to an unverified email address.

Zayıflık türü (CWE): CWE-640

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
GitLab GitLab 16.1 – < 16.1.6, 16.2 – < 16.2.9, 16.3 – < 16.3.7, 16.4 – < 16.4.5, 16.5 – < 16.5.6, 16.6 – < 16.6.4, 16.7 – < 16.7.2

Kaynaklar ve yamalar

CPE eşleşmeleri (NVD) (14)
  • cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:* ≥ 16.1.0 < 16.1.6
  • cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:* ≥ 16.1.0 < 16.1.6
  • cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:* ≥ 16.2.0 < 16.2.9
  • cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:* ≥ 16.2.0 < 16.2.9
  • cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:* ≥ 16.3.0 < 16.3.7
  • cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:* ≥ 16.3.0 < 16.3.7
  • cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:* ≥ 16.4.0 < 16.4.5
  • cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:* ≥ 16.4.0 < 16.4.5
  • cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:* ≥ 16.5.0 < 16.5.6
  • cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:* ≥ 16.5.0 < 16.5.6
  • cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:* ≥ 16.6.0 < 16.6.4
  • cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:* ≥ 16.6.0 < 16.6.4
  • cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:* ≥ 16.7.0 < 16.7.2
  • cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:* ≥ 16.7.0 < 16.7.2

Aynı üründe son açıklar — GitLab

10.0Kritik
CVE-2026-110264

Integer Overflow or Wraparound in GitLab

GitLab GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could hav…

1.3%EPSS
6.8Orta
CVE-2026-12664

Incorrect Authorization in GitLab

GitLab GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an authenticated user with a read_api-scoped token to retrieve a proje…

4.3Orta
CVE-2026-13319

Authorization Bypass Through User-Controlled Key in GitLab

GitLab GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, could have allowed an authenticated to read milestone metadata, including titles, descriptions, and full project p…

3.1Düşük
CVE-2026-14288

Use of Incorrectly-Resolved Name or Reference in GitLab

GitLab GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 17.4 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under certain conditions could have allowed an authenticated to bypass a required merge request approval policy on a pr…

5.9Orta
CVE-2026-16255

Incorrect Authorization in GitLab

GitLab GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 12.0 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when the instance-wide SAML or LDAP membership lock was enabled, an authenticated user could have granted or accepted …