{"uuid": "36d3a3bd-66e8-4f2d-a29f-db53ed56abb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-7028", "type": "exploited", "source": "https://t.me/tengkorakcybercrewz/6746", "content": "The Hacker News\nCISA Warns of Active Exploitation of Severe GitLab Password Reset Vulnerability\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has&nbsp;added&nbsp;a critical flaw impacting GitLab to its Known Exploited Vulnerabilities (KEV) catalog, owing to active exploitation in the wild.\nTracked as&nbsp;CVE-2023-7028&nbsp;(CVSS score: 10.0), the maximum severity vulnerability could facilitate account takeover by sending password reset emails to an unverified email", "creation_timestamp": "2024-05-02T11:54:41.000000Z"}