<p>The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning about the active exploitation of a severe GitLab password reset vulnerability. Tracked as CVE-2023-7028, this critical bug enables cyberattackers to conduct account takeover, leading to potential code theft and supply-chain compromise. The vulnerability has a severity score of 10 and organizations are strongly advised to patch promptly. Additionally, implementing multi-factor authentication (MFA) and zero trust security measures is highly recommended. To mitigate the risk, users should apply the necessary security updates as soon as possible.</p>


Collections

CISA warns of active exploitation of a critical GitLab password reset vulnerability that enables cyberattackers to conduct account takeover and potential code theft.

CISA Warns of Active Exploitation of Severe GitLab Password Reset Vulnerability