January 16, 2024

Critical Account Takeover Vulnerability Impacting GitLab On January 11, 2024, Security fixes for GitLab Community Edition (CE) and Enterprise Edition (EE) were released. The vulnerability identified as CVE-2023-7028 falls under the critical severity category and impacts multiple GitLab CE/EE versions. Exploiting this vulnerability could lead to user account password reset emails being delivered to an