CVE-2023-7028: gitlab — Actively Exploited & Fix

Description

An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account password reset emails could be delivered to an unverified email address.

Is your site exposed to CVE-2023-7028?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

10.0

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild.

Added: May 1, 2024 Remediation due: May 22, 2024

Weakness Type (CWE)

CWE-640 CWE-640

Affected Products

Vendor	Product	Versions
gitlab	gitlab	16.1.0 — 16.1.6
gitlab	gitlab	16.1.0 — 16.1.6
gitlab	gitlab	16.2.0 — 16.2.9
gitlab	gitlab	16.2.0 — 16.2.9
gitlab	gitlab	16.3.0 — 16.3.7
gitlab	gitlab	16.3.0 — 16.3.7
gitlab	gitlab	16.4.0 — 16.4.5
gitlab	gitlab	16.4.0 — 16.4.5
gitlab	gitlab	16.5.0 — 16.5.6
gitlab	gitlab	16.5.0 — 16.5.6
gitlab	gitlab	16.6.0 — 16.6.4
gitlab	gitlab	16.6.0 — 16.6.4
gitlab	gitlab	16.7.0 — 16.7.2
gitlab	gitlab	16.7.0 — 16.7.2

References

Frequently Asked Questions

What is CVE-2023-7028? +

An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account password reset emails could be delivered to an unverified email address. It has a CVSS v3.1 base score of 10.0 (CRITICAL). This vulnerability is listed in CISA's Known Exploited Vulnerabilities catalog, indicating active exploitation in the wild.

How severe is CVE-2023-7028? +

CVE-2023-7028 has a CVSS v3.1 score of 10.0 out of 10, rated CRITICAL. This is a critical vulnerability that should be patched immediately.

What products are affected by CVE-2023-7028? +

CVE-2023-7028 affects products from gitlab, specifically: gitlab. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2023-7028? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2026-118459

A time-derived emergency password can be derived from publicly available application code, enabling authentication without legitimate credentials.

CVE-2026-114421

SEPPmail Secure Email Gateway before 15.1.1 permits password recovery for a created but unregistered GINA account whose initial password is …

CVE-2026-53646

FOSSBilling is a free, open-source billing and client management system. In versions 0.5.6 through 0.7.2, when a `ClientPasswordReset` record already …

CVE-2026-16437

Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and …

CVE-2026-14850

The password reset funcionality is vulnerable to unauthorized account modification due to improper validation of the user_id parameter. An attacker …

CVE-2026-108335

When the password reset functionality is enabled, and email is configured, an attacker could take over any account using a …