Every CVE Search/ Get API key

CVE-2023-7028

Weak Password Recovery Mechanism for Forgotten Password in GitLab

10.0 CriticalIn KEVPublic exploitFix available

An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account password reset emails could be delivered to an unverified email address.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
None

Exploit likelihood

94.5%Up 94.4 points since Jan 17, 2024
90%50%10%1%

What each source reports

CVE List Score used 10.0

Weak Password Recovery Mechanism for Forgotten Password in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account password reset emails could be delivered to an unverified email address.

Record
CVE-2023-7028
CVSS 3.1
10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
Weakness
CWE-640
Updated
2026-11-02
EUVDEUVD-2023-59219 10.0

An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account password reset emails could be delivered to an unverified email address.

Record
EUVD-2023-59219
CVSS 3.1
10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-mgg5-84cv-fc3c 10.0

An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16...

An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account password reset emails could be delivered to an unverified email address.

Record
GHSA-mgg5-84cv-fc3c
CVSS 3.1
10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
Weakness
CWE-284, CWE-640
Updated
2026-11-02
CISA KEV No score

GitLab Community and Enterprise Editions Improper Access Control Vulnerability

GitLab Community and Enterprise Editions contain an improper access control vulnerability. This allows an attacker to trigger password reset emails to be sent to an unverified email address to ultimately facilitate an account takeover.

Record
CVE-2023-7028
Weakness
CWE-284
Updated
2026-11-02
NVD 10.0

An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account password reset emails could be delivered to an unverified email address.

Record
CVE-2023-7028
CVSS 3.1
10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-640
Updated
2026-11-02
OSV 10.0

Weak Password Recovery Mechanism for Forgotten Password in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account password reset emails could be delivered to an unverified email address.

Record
CVE-2023-7028
CVSS 3.1
10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
Weakness
CWE-640
Updated
2026-11-02
OSVUBUNTU-CVE-2023-7028 9.8

An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account password reset emails could be delivered to an unverified email address.

Record
UBUNTU-CVE-2023-7028
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1
10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVBIT-gitlab-2023-7028 No score

Weak Password Recovery Mechanism for Forgotten Password in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account password reset emails could be delivered to an unverified email address.

Record
BIT-gitlab-2023-7028
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
gitlab
Bitnami
 16.1.0 up to 16.1.6, 16.2.0 up to 16.2.9, 16.3.0 up to 16.3.7, 16.4.0 up to 16.4.5, 16.5.0 up to 16.5.6, 16.6.0 up to 16.6.4, 16.7.0 up to 16.7.2
16.1.616.2.916.3.716.4.516.5.616.6.416.7.2
gitlab
Ubuntu:16.04:LTS
 All versions, plus listed versions
8.4.3+dfsg-98.4.3+dfsg-128.5.8+dfsg-5
 None known

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubRandomRobbieBF/CVE-2023-70282024-01-12
PoC in GitHubVozec/CVE-2023-70282024-01-12
PoC in GitHubduy-31/CVE-2023-70282024-01-12
PoC in GitHubgooglei1996/CVE-2023-70282024-01-12
PoC in GitHubEsonhugh/gitlab_honeypot2024-01-18
PoC in GitHubyoryio/CVE-2023-70282024-01-18
PoC in GitHubShimon03/CVE-2023-7028-Account-Take-Over-Gitlab2024-01-23
PoC in GitHubthanhlam-attt/CVE-2023-70282024-01-23
PoC in GitHubTrackflaw/CVE-2023-7028-Docker2024-01-25
PoC in GitHubmochammadrafi/CVE-2023-70282024-01-26
Show 11 moreShow less
Public exploits
SourceLinkDate
PoC in GitHubhackeremmen/gitlab-exploit2024-01-28
Exploit-DBGitLab CE/EE < 16.7.2 - Password Reset2024-03-14
PoC in GitHubsoltanali0/CVE-2023-70282024-07-25
PoC in GitHubgh-ost00/CVE-2023-70282024-08-21
PoC in GitHubsariamubeen/CVE-2023-70282025-02-17
PoC in GitHubSornphut/CVE-2023-7028-GitLab2025-03-29
PoC in GitHubszybnev/CVE-2023-70282025-07-21
PoC in GitHubKameliaZaman/Exploiting-GitLab-CVE-2023-70282025-08-05
PoC in GitHubFearThePLOTO/GitLab-CVE-2023-70282026-09-06
MetasploitGitLab Password Reset Account Takeover2024-01-11
NucleiGitLab - Account Takeover via Password Reset

History

History
RecordedChangedSources
exploitation, exploits
first indexedCVE List, EUVD, Exploit-DB, GitHub Advisories, CISA KEV, Metasploit, Nuclei, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-7028 is a critical vulnerability (CVSS 10.0) in Gitlab, published January 12, 2024. CISA lists it as known to be exploited, since May 1, 2024. EUVD reports exploitation since May 1, 2024. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 94.5%, the 99th percentile. Fixed in gitlab 16.1.6.

References

Show 5 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open