Description
GitLab 任意用户密码重置漏洞(CVE-2023-7028)
GitLab 任意用户密码重置漏洞(CVE-2023-7028)
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-7028
https://gitlab.com/gitlab-org/gitlab/-/issues/436084
https://github.com/zan8in/pocwiki/blob/main/GitLab%E4%BB%BB%E6%84%8F%E7%94%A8%E6%88%B7%E5%AF%86%E7%A0%81%E9%87%8D%E7%BD%AE%E6%BC%8F%E6%B4%9E(CVE-2023-7028).md
https://blog.nsfocus.net/gitlabcve-2023-7028/
https://zhuanlan.zhihu.com/p/680921055
https://avd.aliyun.com/detail?id=AVD-2023-7028
https://wh0am1i.com/2024/03/13/CVE-2023-7028-gitlab-takeover/index.html
https://zone.huoxian.cn/d/2883-gitlab-cve-2023-7028
https://rivers.chaitin.cn/blog/cq9583h0lnechd2450eg
https://www.secrss.com/articles/62746
https://about.gitlab.com/releases/2024/01/11/critical-security-release-gitlab-16-7-2-released/
https://www.rapid7.com/db/vulnerabilities/gitlab-gitlab-cve-2023-7028/
https://www.exploit-db.com/exploits/51889