{"basis":"claimed","id":"CVE-2023-7028","name":"GitLab Community and Enterprise Editions Improper Access Control Vulnerability","vendorProject":"GitLab","product":"GitLab CE/EE","publishedAt":"2024-01-12","cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"exploited":{"kevAdded":"2024-05-01","dueDate":"2024-05-22","ransomware":false},"epss":{"score":0.94458,"percentile":0.99853,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"off","firstOn":"2025-04-22","daysToRule":466},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"no_history","firstOn":null,"daysToRule":null},"fastly":{"status":"no_history","firstOn":null,"daysToRule":null},"f5":{"status":"rule","firstOn":"2024-03-12","daysToRule":60},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}},"title":"Weak Password Recovery Mechanism for Forgotten Password in GitLab","description":"An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account password reset emails could be delivered to an unverified email address.","cwes":["CWE-640"],"vendors":[{"vendor":"cloudflare","status":"off","basis":"claimed","firstOn":"2025-04-22","firstIsNew":true,"daysToRule":466,"daysAtMost":null,"freePlan":false,"claims":[{"id":"61c167d39e906fbe7a3f2b0b88bdcdad46cfdf24dd5f1db266b0a30c9d08b6e9","cve_id":"CVE-2023-7028","vendor":"cloudflare","product":"Cloudflare Managed Ruleset","rule_id":"faa032d9825e4844a1188f3ba5be3327","rule_name":"GitLab - Auth Bypass - CVE:CVE-2023-7028","change":"new","default_action":"Disabled","published_on":"2025-04-22","source_url":"https://developers.cloudflare.com/changelog/post/2025-04-22-waf-release/","source_title":"WAF Release - 2025-04-22","excerpt":"GitLab - Auth Bypass - CVE:CVE-2023-7028. Previous action: Log. New action: Disabled. This is a New Detection","first_seen_at":"2026-11-02T21:00:16.558Z"}]},{"vendor":"aws","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"azure","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"google","status":"no_history","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"fastly","status":"no_history","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"f5","status":"rule","basis":"claimed","firstOn":"2024-03-12","firstIsNew":true,"daysToRule":60,"daysAtMost":null,"freePlan":false,"claims":[{"id":"65cf530a11b8a357cd801e520fdae23e073d0dcac304c2b66688b720a5cb6172","cve_id":"CVE-2023-7028","vendor":"f5","product":"Attack signatures","rule_id":"200020219","rule_name":"GitLab Account Takeover Attempt","change":"new","default_action":null,"published_on":"2024-03-12","source_url":"https://docs.cloud.f5.com/docs-v2/platform/changelogs/security-details-changelog","source_title":"F5 Distributed Cloud attack signatures changelog","excerpt":"Added: signature 200020219 \"GitLab Account Takeover Attempt\" (Session Hijacking, risk High), systems: Other Web Server. References: CVE-2023-7028.","first_seen_at":"2026-11-02T21:00:27.959Z"}]},{"vendor":"akamai","status":"no_source","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"crs","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]}],"updatedAt":"2026-11-03T01:17:40.417Z","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N","ssvc":{"exploitation":"active","automatable":"yes","technicalImpact":"total"},"measured":[{"engineId":"owasp-crs","engineName":"OWASP Core Rule Set","engineVersion":"4.25.0","runtime":"Coraza v3.8.1","config":"paranoia level 1, anomaly threshold 5, default CRS settings","ranAt":"2026-11-02T13:02:57.000Z","verdict":"passed","templateId":"CVE-2023-7028","templatePath":"http/cves/2023/CVE-2023-7028.yaml","requests":2,"blockedRequests":0,"rules":[],"note":"","requestDetail":[{"method":"GET","path":"/users/sign_in","status":200,"blocked":false,"rules":[]},{"method":"POST","path":"/users/password","status":200,"blocked":false,"rules":[]}]},{"engineId":"owasp-crs","engineName":"OWASP Core Rule Set","engineVersion":"4.25.0","runtime":"Coraza v3.8.1","config":"paranoia level 2, anomaly threshold 5, default CRS settings","ranAt":"2026-11-02T13:03:28.000Z","verdict":"passed","templateId":"CVE-2023-7028","templatePath":"http/cves/2023/CVE-2023-7028.yaml","requests":2,"blockedRequests":0,"rules":[],"note":"","requestDetail":[{"method":"GET","path":"/users/sign_in","status":200,"blocked":false,"rules":[]},{"method":"POST","path":"/users/password","status":200,"blocked":false,"rules":[]}]}],"social":{"total":0,"first_seen":null,"daily":[{"day":"2026-10-21","posts":0},{"day":"2026-10-22","posts":0},{"day":"2026-10-23","posts":0},{"day":"2026-10-24","posts":0},{"day":"2026-10-25","posts":0},{"day":"2026-10-26","posts":0},{"day":"2026-10-27","posts":0},{"day":"2026-10-28","posts":0},{"day":"2026-10-29","posts":0},{"day":"2026-10-30","posts":0},{"day":"2026-10-31","posts":0},{"day":"2026-11-01","posts":0},{"day":"2026-11-02","posts":0},{"day":"2026-11-03","posts":0}],"top_posts":[],"exploit_repositories":[]}}