GitLab Releases Security Patches to Fix High-Risk Vulnerabilities

summarize

GitLab has released a security update that fixes two critical vulnerabilities, one of which can be exploited for account hijacking without user interaction.

Vulnerability Details

CVE-2023-7028

The vulnerability, numbered CVE-2023-7028, received the highest rating of 10.0 in the CVSS scoring system, and allows an attacker to hijack an account by simply sending a password reset email to an unauthenticated email address.

The vulnerability stems from a flaw in the mailbox validation process that allows users to reset their passwords via a secondary mailbox.

Affected versions

All unmanaged instances of GitLab Community Edition (CE) and Enterprise Edition (EE) that use the following versions are affected:

• Version 16.1, less than 16.1.6
• Version 16.2, less than 16.2.9
• Version 16.3, less than 16.3.7
• Version 16.4, less than 16.4.5
• Version 16.5, less than 16.5.6
• Version 16.6, less than 16.6.4
• Version 16.7, less than 16.7.2

Restoration measures

GitLab said it fixed the vulnerability in GitLab versions 16.5.6, 16.6.4, and 16.7.2 and ported the fix to versions 16.1.6, 16.2.9, 16.3.7, and 16.4.5.

suggestion

To mitigate potential threats, it is recommended that you upgrade your instance to the fixed version as soon as possible and enable dual authentication, especially for users with elevated privileges, and double-check even if you have previously enabled dual authentication.