GitLab · GitLab CE/EE
CVE-2023-7028
Weak Password Recovery Mechanism for Forgotten Password in GitLab
这是什么
An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account password reset emails could be delivered to an unverified email address.
CISA: GitLab Community and Enterprise Editions contain an improper access control vulnerability. This allows an attacker to trigger password reset emails to be sent to an unverified email address to ultimately facilitate an account takeover.
该怎么做
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
美国联邦机构的修复期限：2024年5月22日
GitLab 的其他被利用漏洞
| 加入日期 | 漏洞 | 产品 | 严重程度 | 受攻击概率 |
|---|---|---|---|---|
| 2026年9月11日 | Path Traversal | Community Edition and Enterprise Edition | 严重 10.0 | 97% |
| 2026年2月18日 | Server-Side Request Forgery (SSRF) | GitLab | 中 6.8 | 53% |
| 2026年2月3日 | Server-Side Request Forgery (SSRF) | Community and Enterprise Editions | 中 6.8 | 36% |
| 2021年11月3日 | Remote Code Execution | Community and Enterprise Editions | 严重 10.0 | 99.7% |
来源：Known Exploited Vulnerabilities（CISA，公有领域）、CVE records（cve.org）和 EPSS（FIRST）。受攻击概率是 EPSS 对未来 30 天内有人尝试利用该漏洞的估计。